我如何在Windows7中将maraDNS设置为2个区域的转发DNS服务器：Intranet和默认区域（又名“其他”）

我正在尝试在Windows 7上设置maraDNS。总而言之，我想让Google DNS解析除Intranet域中的所有内容（由Intranet DNS服务器提供服务）之外的所有内容（可以说是区域“ 1”）。

所以我加了 mararc

hide_disclaimer = "YES"
ipv4_bind_addresses = "127.0.0.1"
timestamp_type = 2
random_seed_file = "secret.txt"

upstream_servers = {}
upstream_servers["."]="8.8.8.8, 8.8.4.4" # Servers we connect to
upstream_servers["intranet.lan."]="1.2.3.4, 2.3.4.5"
upstream_servers["intra.lan."]="1.2.3.4, 2.3.4.5"

这给出了

> askmara.exe Agoogle.com.
# Querying the server with the IP 127.0.0.1
# Remote server said: REFUSED
# NS replies:
# AR replies:

然后，我尝试使用“ csv2”变量和一个文本文件

upstream_servers = {}
upstream_servers["."]="8.8.8.8, 8.8.4.4" # Servers we connect to

csv2 = {}
csv2["intranet.lan."]="db.intr.lan"
csv2["intra.lan."]="db.intr.lan"

文本文件“ db.intr.lan”包含：

intranet.lan.    NS nameserver1.intranet.lan ~
intra.lan.       NS nameserver1.intranet.lan ~

但这发出了警告

Processing zone asw.zone. right now.
Filename: db.eb.txt
Warning: Authoritative NSes must be immediately after SOA
Or the first records in the zone
Otherwise, the record is ignored
Processing zone elektrobit.com. right now.
Filename: db.eb.txt

但是我真的不认为在此处添加“ SOA”记录是正确的方法。

我不想为我的Intranet创建一个权威的名称服务器。只是为了将不同的域转发到不同的名称服务器，并且显然有默认的DNS位于google。我怎么做？

谢谢那怎么

首先，我对maraDNS不熟悉，所以我的答案不会回答您的问题，但是如果您想尝试其他解决方案，我将尝试展示如何在受支持的unboundDNS转发器上执行此操作（尤其是maraDNS的作者说“由于MaraDNS处于严重冻结状态-我只修复安全性和其他严重的错误”）

首先，我们需要unbound谈谈私有IP范围

# Only 'private-domain' and 'local-data' names are allowed to have these private addresses.
private-address: 10.0.0.0/8
private-address: 172.16.0.0/12
private-address: 192.168.0.0/16
private-address: 169.254.0.0/16
private-address: fd00::/8
private-address: fe80::/10

然后说说unbound本地（私有）域

private-domain: "intra.lan."
domain-insecure: "intra.lan."

local-zone: "intra.lan."             nodefault      # nodefault prevent leak of query to outside

# override defaults with stub-zones
local-zone: "168.192.in-addr.arpa." nodefault

然后，我们可以将本地DNS查询重新路由到负责“ intra.lan”上名称解析的本地DNS。其他任何内容都将由上游DNS服务器解决

forward-zone:
    name: "intra.lan."
    forward-addr: 192.168.xx.yy  # IP address of DNS responsible for "intra.lan."

stub-zone:
    name: "xx.168.192.in-addr.arpa."
    stub-addr: 192.168.xx.yy

（用实际IP替换xx和yy）