This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(144, 11%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELD%3C/text%3E%3C/svg%3E)
Hi,
Is it at all possible to install the DNS Server role but in forwarding mode only?
We have many other DNS Servers locally but I have a requirement to have the DNS Server role on an additional Server that I don't want other devices to EVER use for resolution - only 1 should use it...
LANIP1 > WAN1 > VPN > WAN2 > LANIP2 > DNS > LANIP3,4,5,6
Only LANIP1 from the remote side of the VPN should be able to use LANIP2, which just forwards requests to LANIP3,4,5,6
Does that make sense? Basically I don't want to open up all my internal DNS Servers to remote side of the S2S VPN.
Thanks
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Maybe this one helps.
https://learn.microsoft.com/en-us/answers/questions/420894/dns-conditional-forwarder-cache.html
https://learn.microsoft.com/en-us/powershell/module/dnsserver/add-dnsserverconditionalforwarderzone?view=windowsserver2022-ps#example-2--create-an-active-directory-integrated-forwarder
--please don't forget to upvote and Accept as answer if the reply is helpful--
Just checking if there's any progress or updates?
--please don't forget to upvote and Accept as answer if the reply is helpful--
