Re: Errors 40960 & 40961 ...

Kevin,

I've mentioned this previously - there is no DC in the DMZ. It's strictly 2
W2K3 Servers in a workgroup. The 2 DC's I do have are on the LAN and do not
service the DMZ computers.

I have a few Reverse Lookup Zones ...

204.190.207.in-addr.arpa
246.190.207.in-addr.arpa
48.175.192.in-addr.arpa <- I recently put this in by your suggestion in a
previous reply.

Hope that helps.

Mike

"Mike T." wrote:

> Sorry - what is the IP address of what?
>
> The zone is marathontechnologies.com
>
> Mike
>
> "Mike T." wrote:
>
> > Kevin,
> >
> > I did try your suggestion - to no avail. I still receive the error msgs.
> >
> > Any idea why I'm still getting the errors?
> >
> > Mike
> >
> >
> > "Kevin D. Goodknecht Sr. [MVP]" wrote:
> >
> > > In news:DB9DA151-DF32-4217-A3AA-6908CB36CB8E@xxxxxxxxxxxxx,
> > > Mike T. <MikeT@xxxxxxxxxxxxxxxxxxxxxxxxx> commented
> > > Then Kevin replied below:
> > > > Kevin,
> > > >
> > > > Thanks for the info ... but I believe it does not apply
> > > > to my situation. I have 2 NS servers in the DMZ - and
> > > > that's all that's in the DMZ. They are in their own
> > > > private workgroup. There are no DC's. They both are
> > > > W2K3 Std. Servers in a workgroup running DNS. They do
> > > > have reverse lookups for their records.
> > > >
> > > > I thing I will mention is - their private IP is not in
> > > > DNS, but their public IP is not ... I had their public
> > > > in DNS but when pinging the FQDN from outside sometimes
> > > > it would ping the Public IP sometimes it would ping the
> > > > Private IP ... so instead of exposing it's private IP I
> > > > removed that from DNS.
> > > >
> > >
> > > It still applies, Win2k3 and XP will try to register the PTR records for the
> > > IPs on their interfaces. If the reverse zone for the private address does
> > > not exist, it will try to register it in the authoritative DNS server for
> > > the reverse lookup. In this case prisoner.iana.org. If you create the
> > > reverse zone, the error will stop.
> > > I believe on non DCs you can deselect "register this connections addresses
> > > in DNS" and it will stop the DNS client from registering its addresses. DCs
> > > require registry entries.
> > >
> > >
> > >
> > > --
> > > Best regards,
> > > Kevin D4 Dad Goodknecht Sr. [MVP]
> > > Hope This Helps
> > > ===================================
> > > When responding to posts, please "Reply to Group"
> > > via your newsreader so that others may learn and
> > > benefit from your issue, to respond directly to
> > > me remove the nospam. from my email address.
> > > ===================================
> > > http://www.lonestaramerica.com/
> > > ===================================
> > > Use Outlook Express?... Get OE_Quotefix:
> > > It will strip signature out and more
> > > http://home.in.tum.de/~jain/software/oe-quotefix/
> > > ===================================
> > > Keep a back up of your OE settings and folders
> > > with OEBackup:
> > > http://www.oehelp.com/OEBackup/Default.aspx
> > > ===================================
> > >
> > >
> > >
.

Relevant Pages