Port direction for zone transfer (not AD integrated)

Hi guys,

I need  to forward a zone from DNS Server 1 to DNS Server 2 located in different network segments.

Can you help me to clarify what port it requires (I believe TCP 53) and what direction ? Is it the destination server (DNS Server 2) contacting the DNS Server 1 or the other way round ? or is it bi-directional ?

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cliff GaliherCommented:
You want TCP and UDP 53 when possible and you want it bidirectional as well technically a secondary DNS server should contact the primary at intervals so you onky NEED one way. But if you want changes to propagate faster, DNS Notify to the secondary gp the other way and tell the secondary DNS server to check in sooner.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ferraristaAuthor Commented:
Hi Cliff.

so it would suffice to open only one way from the forwarded server up to the forwarding server, right ? I'm not talking about UDP port, as naming resolution is then done by the receiving server, which is in the same network as its DNS clients.

You will want a bidirectional rule on UDP/53 and TCP/53 for pull and notify requests if you are using notify, which you should if you want updates propagating in a timely fashion. Do you have some security concern about a point to point firewall rule being a risk?
Seth SimmonsSr. Systems AdministratorCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Cliff Galiher (https:#a42384867)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

Experts-Exchange Cleanup Volunteer
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.