Use third party DNS with local

Hello,

I have my own local DNS server which serve for file server and AD. In MKT I configure:
admin@Router >

 ip dhcp-server network add address=192.168.1.0/24 gateway
=192.168.1.1 dns-server=192.168.1.3 domain=mydomain.local



ip dns set servers=208.67.222.222,208.67.220.220 allow-re
mote-requests=no

I want all my client get DNS from these 208.67.222.222,208.67.220.220 not 192.168.1.3 (my local dns) but if I configure as above description all my client get local dns instead. If I delete

 dns-server=192.168.1.3

out than my client log into their user AD account take long long time to login and folder shared from server also not recognize until I reconfigure

dns-server=192.168.1.3

again.

My question is how I use third party DNS

ip dns set servers=208.67.222.222,208.67.220.220 allow-re
mote-requests=no

for my client with no problem as I mention above?

To be honest, if you’re using Active Directory you really should serve your local DNS, not third party, and configure the third party DNS server as forwarders on the local DNS server.

If for some reason you’d like to split these responsibilities and/or don’t want all DNS lookups going through your server AD-enabled DNS (why not?), you’re looking for conditional forwarding, which is something that Mikrotik doesn’t support. There are some tricks using L7 mangles but I reckon you’re best of to configure a local host with your favourite DNS server (e.g. Dnsmasq, Bind, etc) where you configure your forwards (e.g. mydomain.local via 192.168.1.3 and default through 208.67.222.222,208.67.220.220).