Windows DNS server configuration

Posted on 2012-09-14
Last Modified: 2012-09-21
I have 3 publicly facing Windows DNS servers.  On the master DNS server, in the properties of a zone I have configured the 'Zone Transfers' tab to be set to 'Allow Zone transfers only to servers listed in the Name Servers tab'.  In the 'Name Servers' tab, I have the 3 servers listed with the corresponding public IPs.

When I am trying to initiate a 'Transfer from master' from one of the other DNS servers, I receive errors in the windows event log that says, 'the zone transfer was refused by the Master server'.  I'm wondering if it's being refused because the request is coming from the internal IP address of the DNS server and not the public IP?   Which IP (internal or external) is the correct one to enter in for the servers in the 'Name Servers' tab?
Question by:AManoux
    LVL 5

    Expert Comment

    Sounds like you have hit the nail on the head....

    If all of your three servers are routable on your private LAN you may as well use the private addresses for transfers.

    If it doesn't work post more info on your network setup.
    LVL 1

    Author Comment

    But if I change the IP address in the 'Name Servers' tab from public to private, will that cause issues when one of the DNS servers tells the requestor to get the information from the other server. Won't it give out the private IP to the external requestor which won't work?
    LVL 5

    Accepted Solution

    Your name servers tab should have public IPs.

    Instead of basing your zone transfers on what is in the name servers tab try specifying the IP addresses (third option).
    LVL 16

    Expert Comment

    by:Dale Harris
    It wouldn't hurt to add both the public and private and test to see which works would it?

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
    New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
    This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
    This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now