Create DNS Forward Lookup Zone and Reverse Lookup Zone

  # New Forward Lookup Zone

Add-DnsServerPrimaryZone -Name "example.com" -ZoneFile "example.com.dns"

Copied!

  # Convert to AD-Integrated Zone

ConvertTo-DnsServerPrimaryZone -Name "example.com" -ReplicationScope Domain

Copied!

  # Change Replication Scope

Set-DnsServerPrimaryZone -Name "example.com" -ReplicationScope Forest

Copied!

  Replication Scope :

-forest  : 🌳 All Domain Controllers in the forest.

-domain  : 🏢 All Domain Controllers in the current domain.

-legacy  : 📦 All DCs that run DNS and are configured for that zone.

  ## Verify Zone and Scope

Get-DnsServerZone | select Zonename,ZoneType,ReplicationScope

Copied!

  # Create A record

Add-DnsServerResourceRecordA -ZoneName "example.com" -Name "www" -IPv4Address "172.31.255.14"

Copied!

  ## Verify A record

Get-DnsServerResourceRecord -ZoneName "example.com"

Copied!

  ## Remove A record

Remove-DnsServerResourceRecord -ZoneName "example.com" -Name "www" -RRType "A" -Force

Copied!

  ## Remove Forward Lookup Zone

Remove-DnsServerZone -Name "example.com" -Force

Copied!

  # New Reverse Lookup Zone

Add-DnsServerPrimaryZone -NetworkId "172.31.255.0/24" -ReplicationScope Forest

Copied!

  ## Verify Zone and Scope

Get-DnsServerZone | Select-Object ZoneName, ZoneType, ReplicationScope

Copied!

  # Add PTR Record

Add-DnsServerResourceRecordPtr -ZoneName "255.31.172.in-addr.arpa" -Name "14" -PtrDomainName "www.example.com"

Copied!

  ## Verify PTR Record

Get-DnsServerResourceRecord -ZoneName "255.31.172.in-addr.arpa"

Copied!

  ## Remove PTR Record

Remove-DnsServerResourceRecord -ZoneName "255.31.172.in-addr.arpa" -Name "14" -RRType "PTR" -Force

Copied!

  ## Remove Reverse Lookup Zone

Remove-DnsServerZone -Name "255.31.172.in-addr.arpa" -Force

Copied!

  # Block Facebook with DNS

Add-DnsServerPrimaryZone -Name "facebook.com" -ReplicationScope Domain Add-DnsServerResourceRecordA ` -ZoneName "facebook.com" ` -Name "@" ` -IPv4Address "0.0.0.0" Add-DnsServerResourceRecordA ` -ZoneName "facebook.com" ` -Name "*" ` -IPv4Address "0.0.0.0"

Copied!