Microsoft DNS recursion for specific internal subnets only

Posted on 2009-04-30
Last Modified: 2012-05-06
We want to configure a Microsoft DNS Server on Windows 2003 Server, that resides on a DMZ, to do recursion (resolve external domains) only for a specific internal subnet and not for the whole internet (it should not be an open DNS).
We have done this several times on Linux using Bind as DNS Server, but we are not sure if this is even possible on a Microsoft DNS.
Thanks in advance for the help.
Question by:kmpez
    LVL 70

    Accepted Solution


    MS DNS doesn't have the functionality to allow you to selectively answer recursive queries. It's one of the many features that would be really useful to have for MS DNS.

    BIND, of course, can with ease, which only makes it more frustrating.


    Author Comment

    Dear Chris,
    thank you very much for your reply.
    If you are sure about your answer then I should close the question.
    Is it possible to have your answer documented (it is not necessary, but it would be nice to have it)?
    Thanks again for the information.

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    Join & Write a Comment

    I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
    Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now