Limit Recursion to Certain Subnets

14/03/2006, 16h10

How do I limit recursion to just my client PCs? I don't want the worl to be
able to use my servers for recursive lookups but there needs to be access to
the server for zone transfers. This is very easily done in BIND, is this not
possible in Windows DNS?

15/03/2006, 21h50

Travis wrote:
> How do I limit recursion to just my client PCs? I don't want the
> worl to be able to use my servers for recursive lookups but there
> needs to be access to the server for zone transfers. This is very
> easily done in BIND, is this not possible in Windows DNS?

No, it is not possible with MS DNS.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

01/04/2006, 16h12

"Travis" <Travis@discussions.microsoft.com> wrote in message
news:C4CF2996-60D5-49AE-AFE7-F5F57A64E7FA@microsoft.com...
> How do I limit recursion to just my client PCs? I don't want the worl to
> be
> able to use my servers for recursive lookups but there needs to be access
> to
> the server for zone transfers.

Then don't put you INTERNAL DNS and EXTERNAL DNS
on the same server/DNS service.

Your EXTERNAL DNS belongs at the REGISTRAR in
almost all cases anyway.

> This is very easily done in BIND, is this not
> possible in Windows DNS?

Yes, it is possible and also a VERY POOR practice
when done.

Internal and External DNS services should ALWAYS
be separated. Most BIND experts will tell you this too.

Just because you can do something doesn't mean it is the
right thing to do.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

14/03/2006, 16h10	#1 (permalink)
Travis Messages: n/a Hébergeur:	Limit Recursion to Certain Subnets How do I limit recursion to just my client PCs? I don't want the worl to be able to use my servers for recursive lookups but there needs to be access to the server for zone transfers. This is very easily done in BIND, is this not possible in Windows DNS?

15/03/2006, 21h50	#2 (permalink)
Kevin D. Goodknecht Sr. [MVP] Messages: n/a Hébergeur:	Re: Limit Recursion to Certain Subnets Travis wrote: > How do I limit recursion to just my client PCs? I don't want the > worl to be able to use my servers for recursive lookups but there > needs to be access to the server for zone transfers. This is very > easily done in BIND, is this not possible in Windows DNS? No, it is not possible with MS DNS. -- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This s =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ https://secure.lsaol.com/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oe.com/OEBackup/Default.aspx ===================================

01/04/2006, 16h12	#3 (permalink)
Herb Martin Messages: n/a Hébergeur:	Re: Limit Recursion to Certain Subnets "Travis" <Travis@discussions.microsoft.com> wrote in message news:C4CF2996-60D5-49AE-AFE7-F5F57A64E7FA@microsoft.com... > How do I limit recursion to just my client PCs? I don't want the worl to > be > able to use my servers for recursive lookups but there needs to be access > to > the server for zone transfers. Then don't put you INTERNAL DNS and EXTERNAL DNS on the same server/DNS service. Your EXTERNAL DNS belongs at the REGISTRAR in almost all cases anyway. > This is very easily done in BIND, is this not > possible in Windows DNS? Yes, it is possible and also a VERY POOR practice when done. Internal and External DNS services should ALWAYS be separated. Most BIND experts will tell you this too. Just because you can do something doesn't mean it is the right thing to do. -- Herb Martin, MCSE, MVP Accelerated MCSE http://www.LearnQuick.Com [phone number on web site]

Outils de la discussion
Afficher une version imprimable Envoyer un lien vers cette page par email