Re: DNS setting-Is this right?
- From: "Hugo Caye" <Hugo@xxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 25 Jul 2001 09:17:04 -0300
Tom and Jim, thank you.
-----Original Message-----
From: Thomas W. Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: quarta-feira, 25 de julho de 2001 01:39
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: DNS setting-Is this right?
http://www.ISAserver.org
Hugo,
Gateway is a stack property, but each interface keeps it own DNS server
list.
Tom
www.isaserver.org/shinder
-----Original Message-----
From: Hugo Caye [mailto:Hugo@xxxxxxxxxxxxx]
Sent: Tuesday, July 24, 2001 6:52 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: DNS setting-Is this right?
http://www.ISAserver.org
Jim, WinNT 4.0 Srvr/Wkstn also?
At least to me, it sounds strange (at least) the DNS resolver
configuration (and default gateway) being an interface property.
Helping to solve DNS servers searching order issues or DNS server
availability (connection through the interface not available), it's
difficult to understand what it has to be with an interface property.
Any help?
TIA,
Hugo
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: terça-feira, 24 de julho de 2001 12:55
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: DNS setting-Is this right?
http://www.ISAserver.org
W2K does deal with DNS resolvers on a NIC-based level; the W2K Resource
Kit explains this in painful detail.
Jim Harrison
MCP(2K), A+, Network+, PCG
----- Original Message -----
From: "Hugo Caye" <Hugo@xxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Tuesday, July 24, 2001 8:24 AM
Subject: [isalist] Re: DNS setting-Is this right?
http://www.ISAserver.org
Do you remember when I wrote about specifying default gateway at NIC
level? As default gateway, why the DNS resolver configuration must be
entered at NIC level? They are IP stack properties, not from the
interfaces.
IMHO, it's a misconception that MS introduced.
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: sábado, 21 de julho de 2001 17:00
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: DNS setting-Is this right?
http://www.ISAserver.org
Hiya Tom!
That's expected behavior with W2K DNS and you'll actually see the same
issue even with the ISP DNS in the external interface; the internal
resolution will bomb out for 'x' time. Notable is that with the DNS
resolvers split across NICs, the whole NIC, not just a DNS entry, will
get blacklisted when even one DNS query fails. That's the main reason
for placing them all in one NIC.
I'm still trying to find some way to modify the "blacklist" timeout that
W2K DNS cache has. I'll review the SP2 fixlist and see if anything jumps
out at me.
Jim Harrison
MCP(2K), A+, Network+, PCG
----- Original Message -----
From: "Thomas W. Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Saturday, July 21, 2001 12:43 PM
Subject: [isalist] Re: DNS setting-Is this right?
http://www.ISAserver.org
Hi Jim,
This brings up something I've noticed at a couple of sites. There seems
to be a bug in the DNS server search feature that prevents the machine
from reverting to the Preferred DNS address if it needs for some reason
to use an alternate DNS server address.
For example, on the internal interface, you enter the DNS server for the
internal network as the Preferred DNS server IP address and you enter
your ISPs DNS server as an alternate. Now, if I take the internal DNS
server down for awhile, the machines can still access external resources
but can't access internal resources by host name. This is to be
expected.
However, if I bring the internal DNS server back online, the ISA Server
does not query the Preferred DNS server any longer, even though its now
available. As you can imagine, that can create all sorts of havoc.
For this reason, I've reverted to configuring the ISPs DNS server on the
external interfaceof the ISA Server.
I know its not supposed to work this way, and I do not know if this has
been fixed with SP2.
Have Fun!
:-)
Tom
www.isaserver.org/shinder
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Saturday, July 21, 2001 2:19 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: DNS setting-Is this right?
http://www.ISAserver.org
What you've done will work, but it's not optimal.
Check this out..
http://www.isaserver.org/pages/tutorials/dns4ISA.htm
Jim Harrison
MCP(2K), A+, Network+, PCG
----- Original Message -----
From: "Adewale Egunjobi" <eddywase@xxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Saturday, July 21, 2001 11:23 AM
Subject: [isalist] DNS setting-Is this right?
http://www.ISAserver.org
Dear all,
On my ISA server(integrated mode) having 2 NICs, the
external NIC was configured with the DNS addresses
from the ISP, while the internal NIC was configured
with the DNS address of the same win2k server hosting
both the ISA server and the DNS server for name
resolution for the internal clients.
This means i'm having 2 different DNS addresses
configured for the 2 NICs, one from ISP while other
from internal DNS server on the ISA.
Things have been working fine but is this right?
Thanks,
Wasiu Egunjobi
A+, MCP+I, MCSE
__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
Hugo@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
Hugo@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
Hugo@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
