I use unblock-us.com dns servers at work to access to pandora.com. Our company is using lots of *.mycompany.internal domains for company stuff. Of course unblock-us can't resolve them and I'm really sick of adding every one of them to the hosts file. Is there a way to use company dns server for mycompany.internal domains and other dns server for the rest? This is for my personal computer, can't change anything on company dns settings.


I've ended up usind Deadwood, recursive dns server for MaraDNS, thanks to Jens Ehrich. This is my Deadwood config file (dwood3rc.txt):

# Please note that each upstream_servers entry takes up space in Deadwood's
# cache and that maximum_cache_elements will need to be increased to store
# a large number of these entries.
upstream_servers = {}
upstream_servers["."] = "," # Google DNS as example

# To have Deadwood perform DNS queries for a small LAN and have the DNS server
#  on resolve queries ending in "internal":
root_servers = {}
root_servers["internal."]="<my.company.dns.ip1>, <my.company.dns.ip2>"

# The IP this program has 

# The IPs allowed to connect and use the cache
recursive_acl = ""

# The file containing a hard-to-guess secret
random_seed_file = "secret.txt" # created with mkSecretTxt.exe from MaraDNS

# By default, for security reasons, Deadwood does not allow IPs in the
# 192.168.x.x, 172.[16-31].x.x, 10.x.x.x, 127.x.x.x, 169.254.x.x,
# 224.x.x.x, or 0.0.x.x range.  If using Deadwood to resolve names
# on an internal network, uncomment the following line:
filter_rfc1918 = 0

And then just used install.bat in Deadwood folder.


You can do this with DNS zone delegation.

First, set up another DNS server (on your own machine is fine) that uses unblock-us.com DNS as a forwarder. You could use something like Simple DNS, MaraDNS, or a local virtual machine running Linux or Windows Server.

Second, add a delegate zone for your company's network that points to your company's DNS servers.

Third, configure your network card to use your new DNS server as the primary name server.

  • I've ended up using Deadwood, thanks. – dstr Nov 23 '16 at 11:17

Have you tried this PowerShell command? Seems a lot easier.

Add-DnsClientNrptRule -Namespace "pqr.com" -NameServers ""

Reference: https://docs.microsoft.com/en-us/powershell/module/dnsclient/add-dnsclientnrptrule?view=win10-ps

  • That would have been great - but unfortunately does not work on my Wondows 10 machine (the command goes though is an Administrator powershell but the extra resolution does not work) – WoJ Jan 30 at 16:55

Your Answer

By clicking "Post Your Answer", you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.