Re: Forworders or Root Hints?

Tech-Archive recommends: Speed Up your PC by fixing your registry



Hi
I vote in Forwarders the reason is security, with forwarders your server
won't go to public "you must select the option disable recursion for this
domain".
Now, if all your clients do ONLY external resolution why not have a cache
only DNS server to do that job?

--

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MCSE, MVP Directory Services

"Nutzer" <helo@xxxxxxxxxxx> wrote in message
news:b4SdnUosG-yHr5janZ2dnUVZ_r2nnZ2d@xxxxxxxxxxxxxxx
Hello,

I'm trying to configure my DC servers as a DNS server. Should I set it
for Forworders or Root hint? This is AD integrated DNS. But all my users
will resolve to outside with this DNS server.



.



Relevant Pages

  • Re: Forworders or Root Hints?
    ... internal network)" You can have your own Cache only DNS server without being ... messup my internal DNS server. ... time I saw an issue with forwarders was with a client that had their DNS ... work (for obvious reasons), at last you have Conditional Forwarding ...
    (microsoft.public.windows.server.dns)
  • Re: DNS Poisoning, pharming, pollution
    ... > running Windows 2003 and have the "secure cache against pollution" setting ... the next thing to look for would be a malicious program on the server. ... Are you using any forwarders? ... Try to localize the problem first -- client side, DNS server, forwarder, ...
    (microsoft.public.windows.server.dns)
  • Re: Cannot get access to router on SBS server
    ... point the DNS server setting to the IP of the SBS ... calling CNetCommit::ValidateFulltimeConnectionProperties. ... Call to Reading web publishing selection returned ok. ...
    (microsoft.public.windows.server.sbs)
  • Re: Herb Martin...Global Catalog SRV record missing!
    ... Error: Root hints list has invalid root hint server: ... DNS server: 128.63.2.53 ... PTR record query for the ...
    (microsoft.public.windows.server.dns)
  • [UNIX] Hardening the BIND DNS Server
    ... Hardening the BIND DNS Server ... Your Domain Name Service is the road sign to your systems on the Internet. ...
    (Securiteam)