problems with KB951746

Hi,

I can't decide how to proceed with getting this problem solved. Wien the
server-side DNS-vulnerability patch (951746) is installed, all my SBS2K3
systems are exhibiting the same problem: extremely show internet access when
the system is under load, meaning when three or more clients are trying to
access the internet at once.

With the patch uninstalled everything returns to normal. This is not
resolved by reserving ports as one fix suggests.

The problem seems to be that DNS can't resolve quickly when the patch is
installed. Sometimes it is so slow that the system times out. I've tried
different forwarders, different DNS servers, and root hints only. If the
patch is installed, nothing helps.

Someone has posted a message about this in the SBS private forum, but he
isn't getting much help.

My indecision stems from the fact that no symptoms show if there is no load,
so if I call CSS after hours I can't show them any symptoms, and I don't
want to load the patch during a work day because access is so slow that
client work slows to a virtual standstill, the remote branches connections
to Exchange server stop responding, and local clients can't do any work that
involves the internet.

I think I'm just going to have to live with this and hope that MS comes up
with a fix for someone else and I hear about it.

Maybe someone here can suggest an approach, because I'm stumped as to how to
proceed.

--

GaryK



.

Relevant Pages

  • Re: problems with KB951746
    ... Both on the server and on the clients. ... access when the system is under load, ... With the patch uninstalled everything returns to normal. ...
    (microsoft.public.windows.server.sbs)
  • Re: Problems with the On Lisp development model ...
    ... > separately, and installed into some known directory, with gcl, maxima, ... > Or should there be a one time process which runs on patch installation ... You could treat maxima as a single application, and load it independently ... This means that there is a start up cost to load the patches each time. ...
    (comp.lang.lisp)
  • Re: DST Patch for Pakistan according to new change in Aug-2008
    ... Please provide me with an idea of who your "clients" are. ... Are you the admin ... then you have no need for the patch at all. ... sync the time with time servers using Windows's list of servers, ...
    (microsoft.public.windowsxp.general)
  • Re: [rfc][patch] sched: remove smpnice
    ... appended patch) too but was n't much bothered as active load balance ... And the reason is the code still assumes that a unit load is ... I've mistakenly assumed that busiest ... int local_group; ...
    (Linux-Kernel)
  • Re: recommended mail clients
    ... AFAICT it's impossible to make it DTRT with inline ... I would second that patch. ... >>would be ideal behavior from a mail client for LKML patch submitters? ... >>desktop clients IMHO. ...
    (Linux-Kernel)