RE: ISA Server DNS Caching

  • From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 19 Jan 2006 13:26:28 -0600

Blocking malicious traffic :)

Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://spaces.msn.com/members/drisa/
Book: http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
**Who is John Galt?**

 

> -----Original Message-----
> From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
> Sent: Thursday, January 19, 2006 1:16 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA Server DNS Caching
> 
> http://www.ISAserver.org
> 
> ..of course.
> Install ISA in an NDS environment and it blocks everything... 
> 
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
>  
> 
> -----Original Message-----
> From: Thor (Hammer of God) [mailto:thor@xxxxxxxxxxxxxxx] 
> Sent: Thursday, January 19, 2006 11:02
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: ISA Server DNS Caching
> 
> http://www.ISAserver.org
> 
> NDS behaviors?  You integrate with Novell now?
> 
> t
> 
> -----
> "I'll see your Llama and up you a Badger."
> John T
> 
> 
> 
> ----- Original Message -----
> From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Thursday, January 19, 2006 9:44 AM
> Subject: [isalist] RE: ISA Server DNS Caching
> 
> 
> http://www.ISAserver.org
> 
> ISA - what; 2000 or 2004?
> 
> Their NDS behaviors are quite different.
> 
> 
> -------------------------------------------------------
>    Jim Harrison
>    MCP(NT4, W2K), A+, Network+, PCG
>    http://isaserver.org/Jim_Harrison/
>    http://isatools.org
>    Read the help / books / articles!
> -------------------------------------------------------
> 
> 
> -----Original Message-----
> From: Young, Gerald G [mailto:Gerald.Young@xxxxxxxxxx]
> Sent: Thursday, January 19, 2006 09:34
> To: [ISAserver.org Discussion List]
> Subject: [isalist] ISA Server DNS Caching
> 
> http://www.ISAserver.org
> 
> 
> I'm trying to get a better understanding of how the ISA 
> Server deals with 
> DNS queries and caching.
> 
> From what I've been able to discern, ISA Server will not use 
> the local hosts 
> file on the system (this configurable?) and instead grabs the 
> record from 
> the DNS server.  However, changes made to the DNS server that 
> propagate out, 
> and are then returning the updated record through NSLOOKUP on 
> the box for 
> all DNS servers configured in the TCP/IP stack do not take 
> immediately.  The 
> ISA logs still show the old IP address being used.  Executing 
> ipconfig 
> /flushdns doesn't work, either.  After about 15 minutes or 
> so, ISA starts 
> using the new DNS record.
> 
> This indicates that caching is going on someplace but I 
> haven't been able to 
> find any additional information on how or where ISA caches 
> DNS records, nor 
> can I find out how to clear that cache?  Service restart, perhaps?
> 
> Any insight will be greatly appreciated.
> 
> Cordially yours,
> 
> Jerry G. Young II
> 
>   MCSE (4.0/W2K)
> 
> Atlanta EES Implementation Team Lead
> 
> HHS Engineering
> 
> Unisys
> 
> 
> 
> 11493 Sunset Hills Rd.
> 
> Reston, VA 20190
> 
> Office: 703-579-2727
> 
> Cell: 703-625-1468
> 
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE 
> PROPRIETARY 
> MATERIAL and is thus for use only by the intended recipient. 
> If you received 
> this in error, please contact the sender and delete the 
> e-mail and its 
> attachments from all computers.
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: 
> jim@xxxxxxxxxxxx To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> All mail to and from this domain is GFI-scanned.
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: 
> thor@xxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: jim@xxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> All mail to and from this domain is GFI-scanned.
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 


Other related posts: