Re: Problems transfering zones to slave DNS servers

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 22 Feb 2002 07:05:54 -0800

Sorry Max, that's backwards, but thanx for playing!
Good point on the DNS server setting, tho.

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!

----- Original Message -----
From: "Max" <max.bene@xxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, February 21, 2002 09:58
Subject: [isalist] Re: Problems transfering zones to slave DNS servers


http://www.ISAserver.org


Sorry Jim,
DNS Queries require TCP Port 53, Zone transfers require UDP Port 53...

In addition, you have to allow Zone Transfer in W2K DNS Server...
If the Server is published on a public network I suggest to limit the
allow zone transfer only to certain servers... for security purpose...

Max

> Zone transfers require a packet filter as:
> TCP
> Inbound
> Remote port any
> Local port 53.
>
> Jim Harrison
> MCP(NT4, W2K), A+, Network+, PCG
> http://isaserver.org/authors/harrison/
> Read the books!
>
> ----- Original Message -----
> From: "Silviu Bondalici" <silviub@xxxxxxxx>
> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
> Sent: Thursday, February 21, 2002 03:37
> Subject: [isalist] Problems transfering zones to slave DNS servers
>
>
> http://www.ISAserver.org
>
>
> My SBS server is mail, DNS, Firewall, proxy, DC, ETC. A have some zones
> and my server is master server. When I try to transfer all zones to slave
> servers, I can do that enabling ALLOW FULL packet filter (meaning I have
> no firewall). I have published DNS server in order to allow queries and
> zone transfer. I also created a DNS Query ALLOW packet filter. Nothing. It
> is working only when I enable ALLOW FULL packet filter.
> Any sugestions?
> Thanks in advance.
>
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> jim@xxxxxxxxxxxx
> To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




Other related posts: