DNS

  • DNS

    DNS servers TYPES

    Types of DNS server Primary DNS server: A primary DNS server is created when a primary zone is added. It is a DNS server which holds primary zones for a particular domain. Primary DNS server acts as the zone’s central point of update. Newly created zones are always this type. We can deploy primary zones in one of two ways: as standard primary zones or primary zones integrated with Active Directory. Standard Primary Zones: A Standard primary zone is the only zone type that can be edited or updated because the data in the zone is the original source of the data for all domains in the zone. Updates made…

  • DNS

    Forwarders and Conditional forward in DNS

    Forwarders: If the query is not resolvable by the local DNS it is being forwarded to another DNS server for name resolution Allows you to configure the local DNS server to forward DNS queries to upstream DNS servers, called forwarders You can specify the IP addresses of upstream DNS servers to which queries should be directed if the local DNS server cannot provide a response through its cache or zone data. When to Use Forwarders: In some cases, network administrators might not want DNS servers to communicate directly with external servers. For example, if your organization is connected to the Internet by means of a slow wide area link, you…

  • DNS

    DNS How to Secure your DNS server

    For more detail click here. Restrict Zone Transfers Configure AD Integrated Zones Configure the Discretionary Access Control List (DACL) Allow Only Secure Dynamic Updates Configure the Global Query Block List Configure the Socket Pool Configure Cache Locking Restrict DNS servers to listen only on selected interfaces Configure Internal Root Hints Disable Recursion on the DNS Server Secure the DNS Cache Secure Zone Transfers with IPsec Configure the DNS Socket Pool 1 In domain Server, open Windows PowerShell and type : Get-DNSServer This command displays the current size of the DNS socket pool (on the fourth line in the ServerSetting section). Note that the current size is 2,500. Please take note that the…

  • DNS

    DNS Round robin, netmask ordering

    DNS Round Robin is a mechanism for choosing an IP address from the list returned by a DNS server so that all clients won’t get the same IP address every time. Netmask ordering is a mechanism for further optimizing which IP address is used by attempting to determine the closest result. 842197 Description of the netmask ordering feature and the round robin feature in Windows Server 2003 DNS http://support.microsoft.com/default.aspx?scid=kb;EN-US;842197 The netmask ordering feature is used to return addresses for type A DNS queries to prioritize local resources to the client. For example, if the following conditions are true, the results of a query for a name are returned to the client…