[isalist] Re: OT: DNS and Forwarders
- From: Steve Moffat <steve@xxxxxxxxxx>
- To: ISA Mailing List <isalist@xxxxxxxxxxxxx>
- Date: Wed, 18 Oct 2006 17:00:09 -0300
http://www.ISAserver.org
-------------------------------------------------------
Ahh....excellent call DR Shinder.....
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of ISA
Sent: Wednesday, October 18, 2006 4:38 PM
To: ISA Mailing List
Subject: [isalist] OT: DNS and Forwarders
http://www.ISAserver.org
-------------------------------------------------------
Tom:
I've been sitting here trying to come up with a 'half lie' to hide that
fact. I can't.
You are correct; PIX501. This is why you are the Professor.
However - I will note that it was pre-existing and that I have no
opportunity at this time to get the small client to switch it out.
Please don't hate me, I'm ugly, poor and hungry.
Joe
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Thomas W Shinder
Posted At: Wednesday, October 18, 2006 3:27 PM
Posted To: ISA
Conversation: [isalist] OT: DNS and Forwarders
Subject: [isalist] Re: OT: DNS and Forwarders
http://www.ISAserver.org
-------------------------------------------------------
Hi Joseph,
Is there a cr*pware firewall like a PIX in front of the ISA Firewall?
That would be the scenario where EDNS might be an issue.
Thomas W Shinder, M.D.
Site: www.isaserver.org
Blog: http://blogs.isaserver.org/shinder/
Book: http://tinyurl.com/3xqb7
MVP -- Microsoft Firewalls (ISA)
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of ISA
> Sent: Wednesday, October 18, 2006 2:14 PM
> To: isalist@xxxxxxxxxxxxx
> Subject: [isalist] OT: DNS and Forwarders
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> Thanks again for the help.
>
> So, I called MS PPS because the DNS issue continued regardless of
> configuration -
>
> Microsoft (Manuj) suggested that the problem is probably: (EDNS). They
> shut it off for now and gave me two MS DNS servers to use as
> forwarders.
>
> Joseph F. Danielsen,
> MCSA - Exchange Messaging Specialist, MCP
> Network Blade Inc.
> 49 Marcy Street
> Somerset, NJ 08873
> 732-213-0600
> www.networkblade.com
>
>
>
>
>
>
> -----Original Message-----
> From: isalist-bounce@xxxxxxxxxxxxx
> [mailto:isalist-bounce@xxxxxxxxxxxxx]
> On Behalf Of Thomas W Shinder
> Posted At: Wednesday, October 18, 2006 2:01 PM
> Posted To: ISA
> Conversation: [isalist] Re: OT: DNS and Forwarders
> Subject: [isalist] Re: OT: DNS and Forwarders
>
> http://www.ISAserver.org
> -------------------------------------------------------
>
> The T-Man is definitely right about this.
>
> Thomas W Shinder, M.D.
> Site: www.isaserver.org
> Blog: http://blogs.isaserver.org/shinder/
> Book: http://tinyurl.com/3xqb7
> MVP -- Microsoft Firewalls (ISA)
>
>
>
> > -----Original Message-----
> > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Thor
> > (Hammer of God)
> > Sent: Wednesday, October 18, 2006 12:52 PM
> > To: isalist@xxxxxxxxxxxxx
> > Subject: [isalist] Re: OT: DNS and Forwarders
> >
> > http://www.ISAserver.org
> > -------------------------------------------------------
> >
> > Why do your internal clients need to resolve DNS directly? I
> > never ever use
> > forwarders on my AD boxes. I always create root zones on my
> > AD DNS servers
> > and only use ISA to resolve DNS for web proxy/fw clients.
> >
> > That's where what I consider "true" security and separation
> > comes from.
> >
> > t
> >
> >
> > On 10/18/06 9:13 AM, "ISA" <ISA@xxxxxxxxxxxxxxxx> spoketh to all:
> >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > >
> > > This actually has happened with and without forwarders -
> > >
> > > Steve, I interpret your suggestion as using only the Root Hints?
> > >
> > >
> > >
> > > Joseph Danielsen, MCSA-Messaging, MCP
> > >
> > > Network Blade Inc.
> > >
> > > 49 Marcy Street
> > >
> > > Somerset, NJ 08873
> > >
> > > 732-213-0600
> > >
> > > www.networkblade.com
> > >
> > >
> > >
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > > On Behalf Of Steve Moffat
> > > Posted At: Wednesday, October 18, 2006 12:08 PM
> > > Posted To: ISA
> > > Conversation: [isalist] Re: OT: DNS and Forwarders
> > > Subject: [isalist] Re: OT: DNS and Forwarders
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > FWIW.....I have 2 caching only DNS Servers that I setup to use as
> > > forwarders for my AD DNS Servers, when I use them, I get
> > the very same
> > > issue. If I however, remove them from the forwarders
> > section, I have no
> > > DNS Issues at all whatsoever, anytime.
> > >
> > > S
> > >
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > > On Behalf Of ISA
> > > Sent: Wednesday, October 18, 2006 1:03 PM
> > > To: ISA Mailing List
> > > Subject: [isalist] Re: OT: DNS and Forwarders
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > Thanks Mike:
> > >
> > > I will try clearing the cache - but this happens now
> about everyday
> > > (morning usually). I really have to find the source of
> the problem.
> > >
> > >
> > >
> > > Joseph Danielsen, MCSA-Messaging, MCP
> > >
> > > Network Blade Inc.
> > >
> > > 49 Marcy Street
> > >
> > > Somerset, NJ 08873
> > >
> > > 732-213-0600
> > >
> > > www.networkblade.com
> > >
> > >
> > >
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > > On Behalf Of Michael Ross
> > > Posted At: Wednesday, October 18, 2006 12:01 PM
> > > Posted To: ISA
> > > Conversation: [isalist] OT: DNS and Forwarders
> > > Subject: [isalist] Re: OT: DNS and Forwarders
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > Windows 2003 DNS servers?
> > > Believe it or not, ive seen that . It's a cache pollution type of
> > > behavior, with no logging or other signs to prove that.
> > > Try to clear the DNS cache next time and see if it helps.
> > >
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > > On Behalf Of ISA
> > > Sent: Wednesday, October 18, 2006 10:59 AM
> > > To: isalist@xxxxxxxxxxxxx
> > > Subject: [isalist] OT: DNS and Forwarders
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > Steve: Funny you should say that because I've done that a
> few times.
> > >
> > > DNS stops - I removed the forwards - Restart DNS - DNS works.
> > > DNS stops - I change the forwards - Restart DNS - DNS works.
> > >
> > > I want to blame my server but I'm just not sure where the
> > failure is.
> > >
> > >
> > >
> > > Joseph Danielsen, MCSA-Messaging, MCP
> > >
> > > Network Blade Inc.
> > >
> > > 49 Marcy Street
> > >
> > > Somerset, NJ 08873
> > >
> > > 732-213-0600
> > >
> > > www.networkblade.com
> > >
> > >
> > >
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > > On Behalf Of Steve Moffat
> > > Posted At: Wednesday, October 18, 2006 11:55 AM Posted To: ISA
> > > Conversation: [isalist] OT: DNS and Forwarders
> > > Subject: [isalist] Re: OT: DNS and Forwarders
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > Remove the forwarders.....then see how fast your Internet speed
> > > gets...:)
> > >
> > > S
> > >
> > > -----Original Message-----
> > > From: isalist-bounce@xxxxxxxxxxxxx
> > [mailto:isalist-bounce@xxxxxxxxxxxxx]
> > > On Behalf Of ISA
> > > Sent: Wednesday, October 18, 2006 12:49 PM
> > > To: ISA Mailing List
> > > Subject: [isalist] OT: DNS and Forwarders
> > >
> > > http://www.ISAserver.org
> > > -------------------------------------------------------
> > >
> > > Hello All -
> > >
> > > This might be off-topic, but has anyone every had their
> > Windows DNS/DC
> > > server intermittently stop forwarding DNS requests?
> > >
> > > I checked with the ISP and they don't recognize and
> > problems on their
> > > end.
> > >
> > > JD
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > > ------------------------------------------------------
> > > List Archives: //www.freelists.org/archives/isalist/
> > > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > > ISA Server Articles and Tutorials:
> > > http://www.isaserver.org/articles_tutorials/
> > > ISA Server Blogs: http://blogs.isaserver.org/
> > > ------------------------------------------------------
> > > Visit TechGenix.com for more information about our other sites:
> > > http://www.techgenix.com
> > > ------------------------------------------------------
> > > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > > Report abuse to listadmin@xxxxxxxxxxxxx
> > >
> > >
> > >
> >
> >
> > ------------------------------------------------------
> > List Archives: //www.freelists.org/archives/isalist/
> > ISA Server Newsletter:
> http://www.isaserver.org/pages/newsletter.asp
> > ISA Server Articles and Tutorials:
> > http://www.isaserver.org/articles_tutorials/
> > ISA Server Blogs: http://blogs.isaserver.org/
> > ------------------------------------------------------
> > Visit TechGenix.com for more information about our other sites:
> > http://www.techgenix.com
> > ------------------------------------------------------
> > To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> > Report abuse to listadmin@xxxxxxxxxxxxx
> >
> >
> >
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
>
>
>
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
