Re: Attn: Susan: Inet browsing problems w/DNS patch 951746

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

FWIW, I put the exclusions in place before installing the patch. No
reason not to, and it'll prevent you from running into potential issues
caused by the patch.

Thanks. Did you reboot after entering the exclusions, then install the patch
and reboot again?

One suggestion: depending on your configuration, you might want to check
that your DNS forwarders are still correct. I have a fixed IP, but it
uses a DHCP reservation. That allows the ISP to dynamically change things
such as the DNS servers. So I periodically look at the settings in my
SonicWall to see that the DNS servers have not changed. (You can see the
current settings on the Forwarders tab in DNS, and compare to those in
your firewall or the recommended ones from your ISP).

Since this started, I've been tweaking the DNS forwarders constantly, and
one thing I've noticed is that it makes absolutely no difference which
forwarder is first relative to what the firewall says.

GaryK

"Gary Karasik" <gkarasik@xxxxxxx> wrote in message
news:u7sSW7J%23IHA.5012@xxxxxxxxxxxxxxxxxxxxxxx
Thanks for the response, Susan.

I haven't put the exclusions in place because the symptoms those are
addressing are different than those I'm experiencing. I will try that
this weekend. I'm not clear whether I put the exclusions in before or
after I install the patch. What do you think?

The symptoms the exclusions address involve services not starting.
Everything is working on my systems; it's just unbearably slow. I'm
thinking it may be an interaction between the patch and BES, which is
resource-intensive and which is using DNS. But that's only a surmise. If
the exclusions don't work, I'll call CSS.

--

GaryK


"Susan Bradley" <sbradcpa@xxxxxxxxxxx> wrote in message
news:OI8LfFE%23IHA.3524@xxxxxxxxxxxxxxxxxxxxxxx
Gary Karasik wrote:
Hi,

I see there are entries in your blog re the recent DNS patch #951746. I
have one server (SBS 2003/Premium/SP2, 2 NICS, ISA installed). With
this patch installed, clients are having a very bad time browsing the
Internet. Page download times are extremely slow and DNS resolution
often fails. This is the only SBS box having the problem, and the only
3rd party app on this server that's not on the others is Blackberry
Enterprise Server. Browsing problems are resolved when 951746 is
uninstalled.

Is there any workaround? I'd like to have this rather important
security update installed, but with it Internet access is so slow that
the users are rebelling.


Did you put in place the exclusions? I've not seen browsing slowness
reported but please put those exclusions in place and if that doesn't
resolve it call CSS as this will be a free call.

The Official SBS Blog : New KB Articles Released Concerning Issues
Around DNS Security Update 953230 (MS08-037):
http://blogs.technet.com/sbs/archive/2008/07/25/new-kb-articles-released-concerning-issues-around-dns-security-update-953230-ms08-037.aspx





.

Relevant Pages

  • Re: Attn: Susan: Inet browsing problems w/DNS patch 951746
    ... I couldn't see any reason to wait for a reboot just to apply the exclusions, knowing that the patch would then require a second reboot. ... I can't remember what they call it, but I think it's the least busy DNS server handling the request - some kind of load balancing. ... I'm not clear whether I put the exclusions in before or after I install the patch. ...
    (microsoft.public.windows.server.sbs)
  • Re: Attn: Susan: Inet browsing problems w/DNS patch 951746
    ... I put the exclusions in place before installing the patch. ... and it'll prevent you from running into potential issues caused by the patch. ... depending on your configuration, you might want to check that your DNS forwarders are still correct. ... I haven't put the exclusions in place because the symptoms those are addressing are different than those I'm experiencing. ...
    (microsoft.public.windows.server.sbs)
  • Re: Attn: Susan: Inet browsing problems w/DNS patch 951746
    ... I'm not clear whether I put the exclusions in before or after I ... install the patch. ... The symptoms the exclusions address involve services not starting. ... I see there are entries in your blog re the recent DNS patch #951746. ...
    (microsoft.public.windows.server.sbs)
  • Re: problems with KB951746
    ... Then, if you are CONFIDENT that you are okay there and the speed issue remains, reconfigure SBS and point it to another DNS server that is known to be patched and working. ... Wien the server-side DNS-vulnerability patch is installed, all my SBS2K3 systems are exhibiting the same problem: extremely show internet access when the system is under load, meaning when three or more clients are trying to access the internet at once. ... My indecision stems from the fact that no symptoms show if there is no load, so if I call CSS after hours I can't show them any symptoms, and I don't want to load the patch during a work day because access is so slow that client work slows to a virtual standstill, the remote branches connections to Exchange server stop responding, and local clients can't do any work that involves the internet. ...
    (microsoft.public.windows.server.sbs)
  • Anyone else having serious repercussions from applying W2k sp4 se curity rollup patch?
    ... Immediately after applying patch, DNS zones disappeared and all file ... replication between DCs was terminated. ... DCs just stopped talking to each other. ... one DC running DNS. ...
    (Bugtraq)