Re: DNS not doing recursive lookups

Thanks for your help Ace.

"Ace Fekay [MVP]" wrote:

> One is your AD domain name is possibly a single label domain name? It should
> be in the form of the TLD plus the first level name, such as example.com. I
> hope you were just trying to mask the names and you do not have a single
> label name.

Actually, I do have a single-label domain name. This place really is a TLD.
If I understand the <a
href="http://support.microsoft.com/?kbid=300684";>knowledge base article</a>
correctly, there are two things that do not work automatically in a single
label domain: 1) dynamic updates do not work and 2) member computers cannot
use DNS to locate DCs in a single-label domain that is in another forest. I'm
not planning on allowing dynamic updates in this domain and I'm not dealing
with multiple forests. So is there another gotcha that I'm overlooking?

> Second, there is NO need for manually creating any records in the
> netlogon.dns file for AD. This is an automatic process. The netlogon
> services updates the netlogon.dns file from what it reads in AD, then it
> sends that data to the zone name configured in the Primary DNS Suffix using
> the DNS address listed in it's IP properties. If this is not working
> automatically, then there is a major configuration problem. A single label
> domain name will cause this not to function.

Netlogon is not doing this automatically. I had assumed that this was
because dynamic DNS was disabled.

>
> Third, the inability for Win2003 to resolve external names without a
> forwarder is possibly due to your Cisco router. Windows 2003 is now using a
> new industry standard feature called EDNS0 that allows UDP DNS queries to go
> beyond the previously capped limit of 512 bytes to the max 1500 MTU. To fix
> it, either update the Cisco firmware (which is the recommendation), or
> disable it in Win2003.
>
> 828731 - An External DNS Query May Cause an Error Message in Windows Server
> 2003:
> http://support.microsoft.com/?id=828731

The Cisco link on this page goes to a "Page Not Found". Searching the Cisco,
site I could not find anything that seemed to mention increasing the
allowable UDP packet size. Does this require a firmware upgrade or just an
upgrade to the IOS? Which versions have the required modification? I'll need
to find firm documentation before I'll be allowed to make changes to the
routers.

In the meantime, I will try disabling the EDNS0 on the Windows 2003 server,
although I will have to wait for a non-peek usage time to perform the test.

Thanks,
--Rob
.

Relevant Pages

  • Re: DNS not doing recursive lookups
    ... >> One is your AD domain name is possibly a single label domain name? ... > automatically in a single label domain: 1) dynamic updates do not ... That article states a client cannot locate DCs because the DNS resolver will ... will not resolve. ...
    (microsoft.public.windows.server.dns)
  • Re: DNS Server Setup
    ... > and new at DNS. ... If not in mixed mode, then it's a little more difficult. ... The BIGGEST problem is that the domain is a single label name. ... whether you use the registry entry metioned in that link above or not. ...
    (microsoft.public.win2000.dns)
  • Re: Single label Domains
    ... > my memory about single label domains and other types. ... There's alot of info on it. ... >> single label name does not depict any sort of hierarchy, since DNS ... that excessive DNS traffic was hitting the ISC Root servers with any machine ...
    (microsoft.public.win2000.dns)
  • Re: FSMO Role holder doesnt have SRV records
    ... I had read the 'single label' article but haven't applied it as my ... Until DC2 populates DNS with it's records I ... servers listed in teh Root Hint tab is the list of servers on the internet ... the agbility to resolve single lable name was disabled. ...
    (microsoft.public.windows.server.dns)
  • Re: Distjointed Namespace, And WideSpread Domain Problems
    ... > the Dns. ... > servers, and we have Errors also with Web Servers using Kerberos. ... SIngle Label AD DNS Domain names are problematic. ... Active Directory Domain Rename Operation: ...
    (microsoft.public.windows.server.dns)
Loading