As i read that post, and hav watched one of the video - The problem is in your setup. You want to have the mikrotik to resolve Local addresses from the 10.x.x.x DNS and the rest from “another” DNS.
To solve this, its your 10.x.x.x server that needs to forward non authorative requests to a internett DNS. There is no such thing like. If DNS1 is reached, but cant reply, try server 2 etc. I dont know of any DNS client working like this. The first server have to reply to both internet and local.
What littlebill wants is the ability to specify different forwarders for different DNS zones. Something similar to the following zone definitions in BIND:
zone "myzone.intra" {
type forward;
forward only;
forwarders { 10.0.0.1; 10.0.0.2; 10.0.0.3; };
};
zone "yourzone.intra" {
type forward;
forward only;
forwarders { 10.1.0.1; 10.1.0.2; 10.1.0.3; };
};
While not critical, would have been nice feature if supported.
it replies with that, if not it does a recursive query to his recursor and answer with the ip he received from whoever is the authorative server for the zone. This way you can, inside your office, have hostnames mapped to internal ip’s for your zone and resolve the rest from your external dns server.
Also don’t forget L7 filter is just an ugly hack. Well, maybe not exactly ugly, in fact it’s pretty clever, but still a hack with significant disadvantages.