Solved

DNS Forwarder in Windows 2008

Posted on 2008-10-10
11
5,145 Views
Last Modified: 2010-12-12
I am creating a totally new forrest, basing it off of my current domain, and I am unable to figure out how DNS is working on the current domain. I would assume that you must set up a DNS Forwarder to allow clients to resolve external names. Currently, in the working domain, there aren't any forwarders set up on any of the DC's. The NIC's all point to themselves for DNS, which I understand to be the correct way of doing things. So how is it that they are able to resolve anything on the external side?
0
Comment
Question by:bkrontz
  • 3
  • 2
  • 2
  • +3
11 Comments
 
LVL 12

Expert Comment

by:michaelgoldsmith
Comment Utility
In Administrative Tools > DNS you can see the forwarders that DNS is using to route traffic to the internet. These are usually provided by your ISP.
0
 
LVL 17

Expert Comment

by:Andres Perales
Comment Utility
you must check on your dns server, right click , properties, forwarders tab...
0
 
LVL 1

Author Comment

by:bkrontz
Comment Utility
I'm sorry, maybe I didn't explain this well. On the Forwarder Tab, there isn't anything there for all of my DC's... hence my confusion.
0
 
LVL 70

Accepted Solution

by:
Chris Dent earned 500 total points
Comment Utility

> So how is it that they are able to resolve anything on the external side?

Root Hints :)

Each DNS server can resolve names without Forwarders by performing an iterative query starting with the Root DNS servers and working down.

When you configure a Forwarder you hand off that work to another DNS server and just wait for an answer.

Chris
0
 
LVL 2

Expert Comment

by:Matt1705
Comment Utility
DNS servers don't need forwarders to work and by default there aren't any.  They are configured to query the root dns servers on the internet.  You don't need to worry about this if you don't have any defined.
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 
LVL 12

Expert Comment

by:michaelgoldsmith
Comment Utility
Root Hints will resolve everything.
0
 
LVL 1

Author Closing Comment

by:bkrontz
Comment Utility
Thanks!!!!!
0
 

Expert Comment

by:cameramonkey
Comment Utility
Michaelgoldsmith: are you sure root hints will resolve everything?

I am experiencing the same thing with my new 2008 DNS server. Its set with the root hints in the list, and recursion/forwarders are disabled. If I try to resolve anything outside the domains that the server has records for, it just returns the "bad error value" when you try to do an nslookup.

Ideas?
0
 
LVL 70

Expert Comment

by:Chris Dent
Comment Utility

You won't resolve anything outside of local zones if you disable Recursion... Root Hints are used when performing a recursive query on behalf of a client.

Chris
0
 

Expert Comment

by:cameramonkey
Comment Utility
IC. Even if I set a device with that server as the primary DNS, when a client tries to resolve, it just gets an unknown domain error. it wont even try the secondary server.
0
 
LVL 70

Expert Comment

by:Chris Dent
Comment Utility

Correct.

NXDomain (does not exist) is considered a good and valid response from a DNS server, only a time-out waiting for a response would cause the client to use any alternate DNS server configured in TCP/IP settings.

Chris
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Join & Write a Comment

There have been a lot of times when we have seen the need to enter a large number of DNS entries in a forward lookup zone. The standard procedure would be to launch the DNS Manager console, create the Zone and start adding new hosts using the New…
BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now