[isalist] Re: OT: DNS and Forwarders

  • From: "Thor (Hammer of God)" <thor@xxxxxxxxxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 18 Oct 2006 16:00:30 -0700

http://www.ISAserver.org
-------------------------------------------------------
  
Well, it's feasible in any ISA configuration... But yes, not with Joseph's
single server client (which I didn't know didn't have ISA...)

t


On 10/18/06 3:37 PM, "Greg Mulholland" <gmulholland@xxxxxxxxxxxx> spoketh to
all:

> http://www.ISAserver.org
> -------------------------------------------------------
>   
> whilst i agree with the principle totally, its not always feasible in some
> environments...catching up on mail, can ya tell?
> 
> Greg
> ----- Original Message -----
> From: "Thor (Hammer of God)" <thor@xxxxxxxxxxxxxxx>
> To: <isalist@xxxxxxxxxxxxx>
> Sent: Thursday, October 19, 2006 3:51 AM
> Subject: [isalist] Re: OT: DNS and Forwarders
> 
> 
>> http://www.ISAserver.org
>> -------------------------------------------------------
>> 
>> Why do your internal clients need to resolve DNS directly?  I never ever
>> use
>> forwarders on my AD boxes.  I always create root zones on my AD DNS
>> servers
>> and only use ISA to resolve DNS for web proxy/fw clients.
>> 
>> That's where what I consider "true" security and separation comes from.
>> 
>> t
>> 
>> 
>> On 10/18/06 9:13 AM, "ISA" <ISA@xxxxxxxxxxxxxxxx> spoketh to all:
>> 
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>> 
>>> 
>>> This actually has happened with and without forwarders -
>>> 
>>> Steve, I interpret your suggestion as using only the Root Hints?
>>> 
>>> 
>>> 
>>> Joseph Danielsen, MCSA-Messaging, MCP
>>> 
>>> Network Blade Inc.
>>> 
>>> 49 Marcy Street
>>> 
>>> Somerset, NJ 08873
>>> 
>>> 732-213-0600
>>> 
>>> www.networkblade.com
>>> 
>>> 
>>> 
>>> 
>>> 
>>> 
>>> -----Original Message-----
>>> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> On Behalf Of Steve Moffat
>>> Posted At: Wednesday, October 18, 2006 12:08 PM
>>> Posted To: ISA
>>> Conversation: [isalist] Re: OT: DNS and Forwarders
>>> Subject: [isalist] Re: OT: DNS and Forwarders
>>> 
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>> 
>>> FWIW.....I have 2 caching only DNS Servers that I setup to use as
>>> forwarders for my AD DNS Servers, when I use them, I get the very same
>>> issue. If I however, remove them from the forwarders section, I have no
>>> DNS Issues at all whatsoever, anytime.
>>> 
>>> S
>>> 
>>> -----Original Message-----
>>> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> On Behalf Of ISA
>>> Sent: Wednesday, October 18, 2006 1:03 PM
>>> To: ISA Mailing List
>>> Subject: [isalist] Re: OT: DNS and Forwarders
>>> 
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>> 
>>> Thanks Mike:
>>> 
>>> I will try clearing the cache - but this happens now about everyday
>>> (morning usually). I really have to find the source of the problem.
>>> 
>>> 
>>> 
>>> Joseph Danielsen, MCSA-Messaging, MCP
>>> 
>>> Network Blade Inc.
>>> 
>>> 49 Marcy Street
>>> 
>>> Somerset, NJ 08873
>>> 
>>> 732-213-0600
>>> 
>>> www.networkblade.com
>>> 
>>> 
>>> 
>>> 
>>> 
>>> 
>>> -----Original Message-----
>>> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> On Behalf Of Michael Ross
>>> Posted At: Wednesday, October 18, 2006 12:01 PM
>>> Posted To: ISA
>>> Conversation: [isalist] OT: DNS and Forwarders
>>> Subject: [isalist] Re: OT: DNS and Forwarders
>>> 
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>> 
>>> Windows 2003 DNS servers?
>>> Believe it or not, ive seen that . It's a cache pollution type of
>>> behavior, with no logging or other signs to prove that.
>>> Try to clear the DNS cache next time and see if it helps.
>>> 
>>> -----Original Message-----
>>> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> On Behalf Of ISA
>>> Sent: Wednesday, October 18, 2006 10:59 AM
>>> To: isalist@xxxxxxxxxxxxx
>>> Subject: [isalist] OT: DNS and Forwarders
>>> 
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>> 
>>> Steve: Funny you should say that because I've done that a few times.
>>> 
>>> DNS stops - I removed the forwards - Restart DNS - DNS works.
>>> DNS stops - I change the forwards - Restart DNS - DNS works.
>>> 
>>> I want to blame my server but I'm just not sure where the failure is.
>>> 
>>> 
>>> 
>>> Joseph Danielsen, MCSA-Messaging, MCP
>>> 
>>> Network Blade Inc.
>>> 
>>> 49 Marcy Street
>>> 
>>> Somerset, NJ 08873
>>> 
>>> 732-213-0600
>>> 
>>> www.networkblade.com
>>> 
>>> 
>>> 
>>> 
>>> 
>>> 
>>> -----Original Message-----
>>> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> On Behalf Of Steve Moffat
>>> Posted At: Wednesday, October 18, 2006 11:55 AM Posted To: ISA
>>> Conversation: [isalist] OT: DNS and Forwarders
>>> Subject: [isalist] Re: OT: DNS and Forwarders
>>> 
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>> 
>>> Remove the forwarders.....then see how fast your Internet speed
>>> gets...:)
>>> 
>>> S
>>> 
>>> -----Original Message-----
>>> From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
>>> On Behalf Of ISA
>>> Sent: Wednesday, October 18, 2006 12:49 PM
>>> To: ISA Mailing List
>>> Subject: [isalist] OT: DNS and Forwarders
>>> 
>>> http://www.ISAserver.org
>>> -------------------------------------------------------
>>> 
>>> Hello All -
>>> 
>>> This might be off-topic, but has anyone every had their Windows DNS/DC
>>> server intermittently stop forwarding DNS requests?
>>> 
>>> I checked with the ISP and they don't recognize and problems on their
>>> end.
>>> 
>>> JD
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>> 
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>> 
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>> 
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>> 
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>> 
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>> 
>>> ------------------------------------------------------
>>> List Archives: //www.freelists.org/archives/isalist/
>>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>>> ISA Server Articles and Tutorials:
>>> http://www.isaserver.org/articles_tutorials/
>>> ISA Server Blogs: http://blogs.isaserver.org/
>>> ------------------------------------------------------
>>> Visit TechGenix.com for more information about our other sites:
>>> http://www.techgenix.com
>>> ------------------------------------------------------
>>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>>> Report abuse to listadmin@xxxxxxxxxxxxx
>>> 
>>> 
>>> 
>> 
>> 
>> ------------------------------------------------------
>> List Archives: //www.freelists.org/archives/isalist/
>> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
>> ISA Server Articles and Tutorials:
>> http://www.isaserver.org/articles_tutorials/
>> ISA Server Blogs: http://blogs.isaserver.org/
>> ------------------------------------------------------
>> Visit TechGenix.com for more information about our other sites:
>> http://www.techgenix.com
>> ------------------------------------------------------
>> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
>> Report abuse to listadmin@xxxxxxxxxxxxx
>> 
>> 
> 
> ------------------------------------------------------
> List Archives: //www.freelists.org/archives/isalist/
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server Articles and Tutorials:
> http://www.isaserver.org/articles_tutorials/
> ISA Server Blogs: http://blogs.isaserver.org/
> ------------------------------------------------------
> Visit TechGenix.com for more information about our other sites:
> http://www.techgenix.com
> ------------------------------------------------------
> To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
> Report abuse to listadmin@xxxxxxxxxxxxx
> 
> 
> 


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 

Other related posts: