Solved

Server 2003 DNS Zone Transfers

Posted on 2007-03-20
4
280 Views
Last Modified: 2010-04-18
Server 2003 DNS is refusing zone transfers from external BIND DNS Servers
0
Comment
Question by:bengoa
4 Comments
 
LVL 13

Expert Comment

by:bleeuwen
ID: 18758752
Make sure the zone transfer tab of the dns properties has the ipnumbers of the external bind servers
0
 
LVL 57

Expert Comment

by:giltjr
ID: 18758757
Just to make sure I understand:

1) Is your 2003 DNS server going to an exernal DNS server and attemping to get a zone?

Or

2) Is a external BIND DNS server attemping to get a zone from the 2003 DNS server?

Either way, the DNS server that is the authoritive (source) may be configured to only allow zone transfers to specific server, by IP address.  So you need to make sure that the DNS server that is the source is configured to allow your DNS server to request a zone tranfers.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 18760221
what level of security do you have on zone transfers>?
0
 
LVL 5

Accepted Solution

by:
suggestionstick earned 500 total points
ID: 18789981
Hi


Make sure that named.conf has:  allow-transfer {IP of 2003 DNS server; }; in the options section, and that 2003 DNS is configured to retrive DNS updates from the BIND server (mentioned above by bleeuwen ).

Also TCP is used instead of UDP for zone transfers, make sure your firewall is configured to allow TCP port 53

Are you using TSIG etc to secure the DNS transfers?

Trev
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now