Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have Windows Server 2008 running on my network with the following properties:

  • Internal IP:
  • External IP:

Now I have registered a domain ( and have it pointing to the external IP of my server.

Now all is fine and dandy, when I go to, I get pointed to my server.

What I want to do, is set up a DNS on said server, and have it redirect requests to to my internal IP, from internal network.



So what I want to happen:

When an external host connects to, they use their default DNS and it resolves to the external 242 IP. When an internal hosts goes to, they use the internal server as a DNS which responds with its own IP.

Is it possible to set this up with Windows Server 2008?

What I was thinking is install the DNS role on my windows server, then create an A record for pointing to itself, and have my DHCP server serve as the DNS server. But how would I set it up so my internal hosts use the real DNS when making requests for other domains? Is there anything else I must do to get this to work properly?

share|improve this question

It should be. What you really want to do is hijack the domain and forward all other queries.

share|improve this answer
Just want to add that this is ridiculously easy using Unbound as I do it all the time. They do have a Windows version, you might check it out: should be a lot less overhead than running Windows DNS. – user168261 Jun 6 '13 at 0:19
heres the technet documentation on Forwarders: – Frank Thomas Jun 6 '13 at 0:23

I am not quite sure if I understand everything you descibe correctly, but I'll give it a try.

Each application uses different ports, and the traffic need to be redireted from youre router. When the router reveives packages from outside to fx your domain port 22 (ssh), then you need to portforwad these packages to a specific IP on your inside network. So when you are outside your net, the command to connect via ssh would be "ssh" and the router forwards you to your machine on your inside net; hence the machine you declare as target through your router settings.

In case you use DHCP then your router sends DNS settings to units on your internal network. You can set specific DNS servers there. These would be distributed automatically.

You can also setup your machines with static IP and set DNS per machine.

share|improve this answer
Ok, i see it has nothing to do with what i wrote. – Fusch Oct 8 '13 at 16:57
There are different possibilities. What about the client hosts file, where you can predefine domaine name resolutions(windows)? Another possibilie could be an internal proxy, maybe you could setup some rules for redirection. – Fusch Oct 8 '13 at 17:06

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.