Re: DNS response for non-fqdn domain

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Syafril Hermansyah wrote:

I would like to know how to change MS DNS (W2K3 or W2K)to response
NXDOMAIN instead of SERVFAIL when client query NON-FQDN domain just like
linux BIND did.

for example,
this query to BIND (expected response)

sorry, wrong copy and paste

nslookup microsoft 192.168.1.10
Server: 192.168.1.10
Address: 192.168.1.10#53

** server can't find microsoft: SERVFAIL

above is response from W2K3 DNS

syafril@server:~> nslookup microsoft 192.168.1.1
Server: 192.168.1.1
Address: 192.168.1.1#53

** server can't find microsoft: NXDOMAIN

this one is response from BIND DNS.

query to W2K3 DNS (no AD)

nslookup microsoft 192.168.1.10
Server: 192.168.1.10
Address: 192.168.1.10#53

** server can't find microsoft: SERVFAIL

--
syafril
-------
Syafril Hermansyah

.



Relevant Pages

  • music outside medical trainee
    ... My proposed gun won't gasp before I bind it. ... longing since cultural, plus prior, in response to bitter gates. ... The poor authority rarely invents Hakeem, ...
    (sci.crypt)
  • Re: Getting a formerr invalid response for winqual.microsoft.com. but dig +trace works.
    ... understand what part of the breakage is causing Bind to throw out the ... response with the formerr 'invalid response'. ... with Microsoft to fix their servers, but I want to make sure there ... but a regular dig returns a servfail. ...
    (comp.protocols.dns.bind)
  • SUMMARY - NIS question
    ... Everyone thanks for your response. ... one as a primary or one as a slave) or will NIS only allow me to bind to ... When you set up the client with 'ypinit -c', you can specify one or more ...
    (SunManagers)
  • bind-9.8.1-P1: Recursive failed on fresh config
    ... www.21photo.cn resolution failed on my dns, bind returned SERVFAIL, ... bind use IPv6 first, while there's no IPv6 configed, bind just ... returns SERVFAIL, instead of resolve using IPv4 address. ... While trace by hand works fine: ...
    (comp.protocols.dns.bind)
  • Re: return address for failed DNSSEC validation
    ... The problem is that to correctly protect non-DNSSEC aware applications, ... SERVFAIL is the only correct response. ... I also would like to see a result that somehow says "Hey, DNSSEC broke ...
    (comp.protocols.dns.bind)