Subscribe to Windows IT Pro
August 29, 2006 12:00 AM

Segregate Your DNS Servers

Enhance security by configuring servers into distinct roles
Windows IT Pro
InstantDoc ID #92660
Rating: (1)

Your third task is to set up a forwarder to handle all other DNS requests. This DNS server would be an external DNS server, such as the one that your Internet provider supplied. So, for example, if your ISP provides DNS server IP addresses of 192.14.9.22 and 192.15.9.23, you would use the command

dnscmd /resetforwarders 192.14.9.22 192.15.9.23 

If you maintain a tight firewall policy, you might not want your resolvers to be able to perform recursive lookups on their own. If you prefer that your resolvers contact only your external DNS servers, add the /slave parameter to the previous command.

To test the setup, set the DNS servers on your network adaptor to those you used for your resolvers. Then, use Nslookup to search for several local and public host names.

Good Plan
If you follow this article's DNS server plan, you'll find that your DNS infrastructure will perform more efficiently and securely, and you'll experience more uptime. And you'll be capable of scaling to just about any size your organization requires.

Related Content:

ARTICLE TOOLS

Comments
  • Kris
    6 years ago
    Dec 04, 2006

    What about reverse lookups? I implemented the procedure outlined in the article but am unable to query by ip.

You must log on before posting a comment.

Are you a new visitor? Register Here

advertisement

advertisement

Windows is a trademark of the Microsoft group of companies. Windows IT Pro is used by Penton Media Inc. under license from owner.