Windows DNS Server - Forwarding mode only

Question

Hi,

Is it at all possible to install the DNS Server role but in forwarding mode only?

We have many other DNS Servers locally but I have a requirement to have the DNS Server role on an additional Server that I don't want other devices to EVER use for resolution - only 1 should use it...

LANIP1 > WAN1 > VPN > WAN2 > LANIP2 > DNS > LANIP3,4,5,6

Only LANIP1 from the remote side of the VPN should be able to use LANIP2, which just forwards requests to LANIP3,4,5,6

Does that make sense? Basically I don't want to open up all my internal DNS Servers to remote side of the S2S VPN.

Thanks

Answer 1

Maybe this one helps.
https://learn.microsoft.com/en-us/answers/questions/420894/dns-conditional-forwarder-cache.html
https://learn.microsoft.com/en-us/powershell/module/dnsserver/add-dnsserverconditionalforwarderzone?view=windowsserver2022-ps#example-2--create-an-active-directory-integrated-forwarder

--please don't forget to upvote and Accept as answer if the reply is helpful--