Re: DNS setting-Is this right?

Hi Hugo,

On a multihomed host, it does appear that the DNS server lists on each
adapter are treated differently, rather than just being piled into a
general IP stack list.

Tom
www.isaserver.org/shinder


Thomas W Shinder, M.D., MCSE, MCT
 


-----Original Message-----
From: Hugo Caye [mailto:Hugo@xxxxxxxxxxxxx]
Sent: Tuesday, July 24, 2001 10:25 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: DNS setting-Is this right?


http://www.ISAserver.org



Do you remember when I wrote about specifying default gateway at NIC
level? As default gateway, why the DNS resolver configuration must be
entered at NIC level? They are IP stack properties, not from the
interfaces.

IMHO, it's a misconception that MS introduced.

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: sábado, 21 de julho de 2001 17:00
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: DNS setting-Is this right?


http://www.ISAserver.org


Hiya Tom!

That's expected behavior with W2K DNS and you'll actually see the same
issue
even with the ISP DNS in the external interface; the internal resolution
will bomb out for 'x' time.  Notable is that with the DNS resolvers
split
across NICs, the whole NIC, not just a DNS entry, will get blacklisted
when
even one DNS query fails.  That's the main reason for placing them all
in
one NIC.

I'm still trying to find some way to modify the "blacklist" timeout that
W2K
DNS cache has.
I'll review the SP2 fixlist and see if anything jumps out at me.


Jim Harrison
MCP(2K), A+, Network+, PCG


----- Original Message -----
From: "Thomas W. Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Saturday, July 21, 2001 12:43 PM
Subject: [isalist] Re: DNS setting-Is this right?


http://www.ISAserver.org


Hi Jim,

This brings up something I've noticed at a couple of sites. There seems
to be a bug in the DNS server search feature that prevents the machine
from reverting to the Preferred DNS address if it needs for some reason
to use an alternate DNS server address.

For example, on the internal interface, you enter the DNS server for the
internal network as the Preferred DNS server IP address and you enter
your ISPs DNS server as an alternate. Now, if I take the internal DNS
server down for awhile, the machines can still access external resources
but can't access internal resources by host name. This is to be
expected.

However, if I bring the internal DNS server back online, the ISA Server
does not query the Preferred DNS server any longer, even though its now
available. As you can imagine, that can create all sorts of havoc.

For this reason, I've reverted to configuring the ISPs DNS server on the
external interfaceof the ISA Server.

I know its not supposed to work this way, and I do not know if this has
been fixed with SP2.

Have Fun!

:-)

Tom
www.isaserver.org/shinder


-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Saturday, July 21, 2001 2:19 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: DNS setting-Is this right?


http://www.ISAserver.org


What you've done will work, but it's not optimal.
Check this out..

http://www.isaserver.org/pages/tutorials/dns4ISA.htm

Jim Harrison
MCP(2K), A+, Network+, PCG


----- Original Message -----
From: "Adewale Egunjobi" <eddywase@xxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Saturday, July 21, 2001 11:23 AM
Subject: [isalist] DNS setting-Is this right?


http://www.ISAserver.org


Dear all,

On my ISA server(integrated mode) having 2 NICs, the
external NIC was configured with the DNS addresses
from the ISP, while the internal NIC was configured
with the DNS address of the same win2k server hosting
both the ISA server and the DNS server for name
resolution for the internal clients.

This means i'm having 2 different DNS addresses
configured for the 2 NICs, one from ISP while other
from internal DNS server on the ISA.

Things have been working fine but is this right?


Thanks,

Wasiu Egunjobi
A+, MCP+I, MCSE

__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')



------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
Hugo@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: