|
|
Hi all,
I created a conditional forwarder to another forest and added 3 forwarder IP addresses to three DC's at that forest. There is a 5 second query time out and the "do not use recursion for this domain" is un-checked.
I find that if the first IP address is not available, the forwarder doesn't try the next IP address in the list. If I manually move the next (working) IP address up in the list, thus placing the failing IP address as second, I can now ping the domain.
Any ideas on what I set up incorrectly?
Also, am I correct in my observation that conditional forwarders do not replicate between DNS servers, but stub zones do?
Thanks! -- Bob
|
|
Hello Bob,
Thank you for using newsgroup!
By default, the DNS Client service asks the server to use a process of recursion to fully resolve names on behalf of the client before returning an answer. In most cases, the DNS server is configured, by default, to support the recursion process. A referral answer contains additional resource records not specified by name or type in the query. This type of answer is returned to the client if the recursion process is not supported. The records are meant to act as helpful reference answers that the client can use to continue the query using iteration.
Disabling the use of recursion on a DNS server is generally done when DNS clients are being limited to resolving names to a specific DNS server, such as one located on your intranet. Recursion might also be disabled when the DNS server is incapable of resolving external DNS names, and clients are expected to fail over to another DNS server for resolution of these names.
Configure a DNS server to use forwarders http://technet2.microsoft.com/windowsserver/en/library/ee992253-235e-4fd4-b4 da-7e57e70ad3821033.mspx?mfr=true
How DNS query works http://www.microsoft.com/windows/windows2000/en/advanced/help/sag_DNS_und_Ho wDnsWorks.htm
Thanks & Regards,
Ken Zhao
Microsoft Online Support Microsoft Global Technical Support Center
Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security> ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights.
-------------------- | Thread-Topic: Conditional Forwarding | thread-index: AceNhH7+IvDeVE3xSwy4dMdzkynCrQ== | X-WBNR-Posting-Host: 207.46.19.168 | From: =?Utf-8?B?Qm9i?= <86c6c2e6-2146512712[ at ]news.postalias> | Subject: Conditional Forwarding | Date: Thu, 3 May 2007 06:11:00 -0700 | Lines: 19 | Message-ID: <B9DC2C57-C692-4D21-87DE-139B9EF3C85E[ at ]microsoft.com> | MIME-Version: 1.0 | Content-Type: text/plain; | charset="Utf-8" | Content-Transfer-Encoding: 7bit | X-Newsreader: Microsoft CDO for Windows 2000 | Content-Class: urn:content-classes:message | Importance: normal | Priority: normal | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826 | Newsgroups: microsoft.public.windows.server.dns | Path: TK2MSFTNGHUB02.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.dns:2742 | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149 | X-Tomcat-NG: microsoft.public.windows.server.dns | | Hi all, | | I created a conditional forwarder to another forest and added 3 forwarder IP | addresses to three DC's at that forest. There is a 5 second query time out | and the "do not use recursion for this domain" is un-checked. | | I find that if the first IP address is not available, the forwarder doesn't | try the next IP address in the list. If I manually move the next (working) | IP address up in the list, thus placing the failing IP address as second, I | can now ping the domain. | | Any ideas on what I set up incorrectly? | | Also, am I correct in my observation that conditional forwarders do not | replicate between DNS servers, but stub zones do? | | Thanks! | -- | Bob |
|
|
Read inline please.
In news:B9DC2C57-C692-4D21-87DE-139B9EF3C85E[ at ]microsoft.com, Bob <86c6c2e6-2146512712[ at ]news.postalias> typed:
[Quoted Text] > Hi all, > > I created a conditional forwarder to another forest and added 3 > forwarder IP addresses to three DC's at that forest. There is a 5 > second query time out and the "do not use recursion for this domain" > is un-checked. > > I find that if the first IP address is not available, the forwarder > doesn't try the next IP address in the list. If I manually move the > next (working) IP address up in the list, thus placing the failing IP > address as second, I can now ping the domain. > > Any ideas on what I set up incorrectly?
Check the box, "Do not use recursion for this domain" This will cause your DNS to check all forwarders and will not fall back to using its own recursion (To the Root Hint servers)
> > Also, am I correct in my observation that conditional forwarders do > not replicate between DNS servers, but stub zones do?
This is correct, in this scenario, a Stub zone may be more reliable because the stub has a list of NS records it can use to resolve names.
-- Best regards, Kevin D. Goodknecht Sr. [MVP] Hope This Helps Send IM: http://www.icq.com/people/webmsg.php?to=296095728 =================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue, to respond directly to me remove the nospam. from my email address. =================================== http://www.lonestaramerica.com/ http://support.wftx.us/ http://message.wftx.us/ =================================== Use Outlook Express?... Get OE_Quotefix: It will strip signature out and more http://home.in.tum.de/~jain/software/oe-quotefix/ =================================== Keep a back up of your OE settings and folders with OEBackup: http://www.oehelp.com/OEBackup/Default.aspx ===================================
|
|
Thanks Kevin!
Thanks & Regards,
Ken Zhao
Microsoft Online Support Microsoft Global Technical Support Center
Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security> ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights.
-------------------- | Reply-To: "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> | From: "Kevin D. Goodknecht Sr. [MVP]" <admin[ at ]nospam.WFTX.US> | References: <B9DC2C57-C692-4D21-87DE-139B9EF3C85E[ at ]microsoft.com> | Subject: Re: Conditional Forwarding | Date: Fri, 4 May 2007 11:16:02 -0500 | Lines: 58 | X-Priority: 3 | X-MSMail-Priority: Normal | X-Newsreader: Microsoft Outlook Express 6.00.2900.3028 | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028 | Message-ID: <OvcqDemjHHA.3472[ at ]TK2MSFTNGP04.phx.gbl> | Newsgroups: microsoft.public.windows.server.dns | NNTP-Posting-Host: ns2.lonestaramerica.com 65.65.91.210 | Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.dns:2774 | X-Tomcat-NG: microsoft.public.windows.server.dns | | Read inline please. | | In news:B9DC2C57-C692-4D21-87DE-139B9EF3C85E[ at ]microsoft.com, | Bob <86c6c2e6-2146512712[ at ]news.postalias> typed: | > Hi all, | > | > I created a conditional forwarder to another forest and added 3 | > forwarder IP addresses to three DC's at that forest. There is a 5 | > second query time out and the "do not use recursion for this domain" | > is un-checked. | > | > I find that if the first IP address is not available, the forwarder | > doesn't try the next IP address in the list. If I manually move the | > next (working) IP address up in the list, thus placing the failing IP | > address as second, I can now ping the domain. | > | > Any ideas on what I set up incorrectly? | | Check the box, "Do not use recursion for this domain" This will cause your | DNS to check all forwarders and will not fall back to using its own | recursion (To the Root Hint servers) | | | > | > Also, am I correct in my observation that conditional forwarders do | > not replicate between DNS servers, but stub zones do? | | This is correct, in this scenario, a Stub zone may be more reliable because | the stub has a list of NS records it can use to resolve names. | | | | | -- | Best regards, | Kevin D. Goodknecht Sr. [MVP] | Hope This Helps | Send IM: http://www.icq.com/people/webmsg.php?to=296095728 | =================================== | When responding to posts, please "Reply to Group" | via your newsreader so that others may learn and | benefit from your issue, to respond directly to | me remove the nospam. from my email address. | =================================== | http://www.lonestaramerica.com/ | http://support.wftx.us/ | http://message.wftx.us/ | =================================== | Use Outlook Express?... Get OE_Quotefix: | It will strip signature out and more | http://home.in.tum.de/~jain/software/oe-quotefix/ | =================================== | Keep a back up of your OE settings and folders | with OEBackup: | http://www.oehelp.com/OEBackup/Default.aspx | =================================== | | |
|
|
Hi Bob,
I am just writing to see how everything is going. If you have any updates or need any further assistance on this issue, please feel free to let me know.
Thanks & Regards,
Ken Zhao
Microsoft Online Support Microsoft Global Technical Support Center
Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security> ==================================================== When responding to posts, please "Reply to Group" via your newsreader so that others may learn and benefit from your issue. ==================================================== This posting is provided "AS IS" with no warranties, and confers no rights.
-------------------- | X-Tomcat-ID: 50256060 | References: <B9DC2C57-C692-4D21-87DE-139B9EF3C85E[ at ]microsoft.com> | MIME-Version: 1.0 | Content-Type: text/plain | Content-Transfer-Encoding: 7bit | From: v-kzhao[ at ]online.microsoft.com ("Ken Zhao [MSFT]") | Organization: Microsoft | Date: Fri, 04 May 2007 03:32:04 GMT | Subject: RE: Conditional Forwarding | X-Tomcat-NG: microsoft.public.windows.server.dns | Message-ID: <$vroRzfjHHA.4068[ at ]TK2MSFTNGHUB02.phx.gbl> | Newsgroups: microsoft.public.windows.server.dns | Lines: 87 | Path: TK2MSFTNGHUB02.phx.gbl | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.dns:2766 | NNTP-Posting-Host: tomcatimport2.phx.gbl 10.201.218.182 | | Hello Bob, | | Thank you for using newsgroup! | | By default, the DNS Client service asks the server to use a process of | recursion to fully resolve names on behalf of the client before returning | an answer. In most cases, the DNS server is configured, by default, to | support the recursion process. A referral answer contains additional | resource records not specified by name or type in the query. This type of | answer is returned to the client if the recursion process is not supported. | The records are meant to act as helpful reference answers that the client | can use to continue the query using iteration. | | Disabling the use of recursion on a DNS server is generally done when DNS | clients are being limited to resolving names to a specific DNS server, such | as one located on your intranet. Recursion might also be disabled when the | DNS server is incapable of resolving external DNS names, and clients are | expected to fail over to another DNS server for resolution of these names. | | Configure a DNS server to use forwarders | http://technet2.microsoft.com/windowsserver/en/library/ee992253-235e-4fd4-b4 | da-7e57e70ad3821033.mspx?mfr=true | | How DNS query works | http://www.microsoft.com/windows/windows2000/en/advanced/help/sag_DNS_und_Ho | wDnsWorks.htm | | Thanks & Regards, | | Ken Zhao | | Microsoft Online Support | Microsoft Global Technical Support Center | | Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security> | ==================================================== | When responding to posts, please "Reply to Group" via your newsreader so | that others may learn and benefit from your issue. | ==================================================== | This posting is provided "AS IS" with no warranties, and confers no rights. | | | | | | -------------------- | | Thread-Topic: Conditional Forwarding | | thread-index: AceNhH7+IvDeVE3xSwy4dMdzkynCrQ== | | X-WBNR-Posting-Host: 207.46.19.168 | | From: =?Utf-8?B?Qm9i?= <86c6c2e6-2146512712[ at ]news.postalias> | | Subject: Conditional Forwarding | | Date: Thu, 3 May 2007 06:11:00 -0700 | | Lines: 19 | | Message-ID: <B9DC2C57-C692-4D21-87DE-139B9EF3C85E[ at ]microsoft.com> | | MIME-Version: 1.0 | | Content-Type: text/plain; | | charset="Utf-8" | | Content-Transfer-Encoding: 7bit | | X-Newsreader: Microsoft CDO for Windows 2000 | | Content-Class: urn:content-classes:message | | Importance: normal | | Priority: normal | | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2826 | | Newsgroups: microsoft.public.windows.server.dns | | Path: TK2MSFTNGHUB02.phx.gbl | | Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.dns:2742 | | NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149 | | X-Tomcat-NG: microsoft.public.windows.server.dns | | | | Hi all, | | | | I created a conditional forwarder to another forest and added 3 forwarder | IP | | addresses to three DC's at that forest. There is a 5 second query time | out | | and the "do not use recursion for this domain" is un-checked. | | | | I find that if the first IP address is not available, the forwarder | doesn't | | try the next IP address in the list. If I manually move the next | (working) | | IP address up in the list, thus placing the failing IP address as second, | I | | can now ping the domain. | | | | Any ideas on what I set up incorrectly? | | | | Also, am I correct in my observation that conditional forwarders do not | | replicate between DNS servers, but stub zones do? | | | | Thanks! | | -- | | Bob | | | |
|
|
Thanks for your insite (Kevin and Ken)! -- Bob
|
|
|