Solved

Windows 2003 Split DNS solution ?

Posted on 2014-07-23
3
44 Views
Last Modified: 2016-06-09
Hello everyone,

I have a question regarding DNS running on Windows 2003 server.  If I disable recursion  (from check box "Disable recursion (also disable forwarders" )) I cannot use my DNS server to resolve external IP.  For example everyting works internally but if I want to go to yahoo.com the page cannot be displayed.

Now you probably ask yourself why I want to disable recursion.  That's because we need to prevent DDoS
Anyways, I ticked off  the check box and bingo!  I am now protected.  One little thing.. there is no INTERNET !  Which likes in any organization, this is a NO GO.  

I think the solution is to implement split DNS, however I am not sure about it.  For example if I had "Disable recursion (also disable forwarders)" enabled the forwarders will not work.  Then I think that it does not matter what I add under Forwarders tab will not work (remember, forwarders are disabled)

Would appreciate if someone can point me in the right direction

Cheers
0
Comment
Question by:Bibecu
3 Comments
 
LVL 38

Accepted Solution

by:
Hypercat (Deb) earned 500 total points
ID: 40215358
This has nothing to do with split DNS from your description. You can disable recursion and forwarders and still have Internet name resolution as long as the root hints are enabled.  So, check the root hints tab and make sure they are all enabled.  

OTOH, you aren't vulnerable to a DNS-related DDoS attack unless you are allowing INCOMING traffic on your router on TCP port 53 (DNS).  The only reason to allow  this traffic would be if your internal DNS server is responding to requests from outside your internal LAN (other than through an IPSEC tunnel or other type of encrypted communication).
0
 

Author Comment

by:Bibecu
ID: 40229599
Very good idea, thank you!  Problem solved !
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question