Q about dns forwarders/win2k server

Win2k server domain running in mixed mode

on our network we have 3 domain controllers one of which, lets call it SERVER_B, connects to  another network that leads to the internet and our providers DNS servers.  

We keep having problems where dns packets seem to end up going in circles and using up all server's processing power.  I've been wondering if we had the forwarders set wrong.  

1. should dns servers be set to forward to other internal dns servers?
2. should we tick the disable recursive queries box
3. Only SERVER_B needs its forwarders set to the isp dns server yes?
4. what order should forwarders be in on SERVER_B?

We also have a MS proxy 2 running on an NT server that also connects to the other network (although this is a bit buggered and isnt on the network properly but works with people connecting as anonymous). We've ordered ISA server.
5. in an ideal situation would i be right in thinking that ISA Server should be on SERVER_B?



LVL 3
browolfAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

marc_nivensCommented:
1.  No.  The purpose of forwarders is to resolve names you can't.  Internal DNS servers should have the same records.
2.  No.  Without recursive queries your DNS server has to have the answer to any question it is asked, or the name will not resolve.  You can't disable recursion and have forwarders enabled at the same time anyway.
3.  I'd set all 3 to forward to the ISP, just don't forward to each other.
4.  It shouldn't matter, again as long as all of the forwarders listed are external DNS servers.
5.  Actually I'd keep ISA on its own machine if possible.
0
browolfAuthor Commented:
the dc which can contact the upstream dns has to be multihomed.  
can the other 2 dns forward if they can't reach the updtream dns's?

the default gateway is the nt box. should the 2 dns servers use the 3rd one as their default gateway instead?

0
marc_nivensCommented:
The DNS server will have to be able to contact the upstream DNS for forwarding to work.  I can't answer the question about the default gateway because I don't have enough information about your network.   Come to think of it, it may work if you set the 2 dns servers to forward to the multihomed box, and set the multihomed box to forward outside.
0
Cloud Class® Course: C++ 11 Fundamentals

This course will introduce you to C++ 11 and teach you about syntax fundamentals.

browolfAuthor Commented:
i was wondering about that.  
so the important thing is to make sure the multihomed server is ONLY forwarding upstream.
0
marc_nivensCommented:
Exactly.  If you were to set up server B to forward to server A, and server A to forward to server B you would get stuck in a DNS lookup loop.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
browolfAuthor Commented:
i think that must have been what happened. thanks  for your help
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.