Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Root Hint & Forwarded DNS

Posted on 2011-02-26
2
Medium Priority
?
878 Views
Last Modified: 2012-05-11
Dear All,

I’m using the forwarded in our DNS servers in the environment to forward all DNS quires to our ISP, I want to ask about the root hint, do I have to remove them? What is the recommended here, using forwarded DNS or Root hint?

Thanks
0
Comment
Question by:Arabsoft_Security
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 39

Assisted Solution

by:Krzysztof Pytko
Krzysztof Pytko earned 1000 total points
ID: 34986967
Personally, I'm using Forwarders (ISP or openDNS like Google 8.8.4.4/8.8.8.8) instead of Root Hints.

When you have disabled Root Hints you have to specify at least one IP address for Forwarders to be able to use the Internet resources. When you have Root Hints, then you don't need Forwarders.

Using Forwarders, you have to care by yourself to update them in case that they were changed/removed (mostly we place less DNS servers that Root Hints' list have :) ) and small local ISP could change IPs or bancrupt ;)

Root Hints have more TLD DNS servers and are more reliable, but you need to use thm from trusted source.

I don't know if Chris-Dent is now available, but I would rely on his opinion. He's an expert on DNS filed :)

Regards,
Krzysztof
0
 
LVL 11

Accepted Solution

by:
MichaelVH earned 1000 total points
ID: 34987096
Actually, both will work just fine.

In case you don't user forwarders, your own DNS server will do the "searching". It actually goes like this (in a nutshell):

1. Client sends query to local DNS Server
2. Local server checks if it's authoritative for the domain asked for
3. If not, it will check it's local cache to see if the entry has been cached
4. If not it will contact a DNS root server (e.g. d.root-servers.net) to ask what server is authoritative for the domain
5. the root servers answers with the authoritative server for that domain (eg. server.domain.com)
6. server.domain.com will respond with a list of name servers for domain.com (eg. nameserver.domain.com)
7. local server will contact nameserver.domain.com and requests the record
8. nameserver.domain.com will answer with the record (+info)
9. local server answers to the clients's query

If you've got forwarders configured step 1-3 remain the same.

as from step 4 the forwarder is contacted and it's that server that will do the queries for you (go through step 1-9 again).

So, basically: when using forwarders you'll have some load less on your dns servers.

Grts,

Michael


0

Featured Post

Ready for your healthcare security check-up?

In the past few years, healthcare organizations have become a prime target for advanced attacks. Does your organization have what it needs to defend itself? Schedule your healthcare security check-up today and download our free Healthcare Security Resource Kit today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question