PC Review


Reply
Thread Tools Rate Thread

How to delete root-servers?

 
 
Stefan Kirch
Guest
Posts: n/a
 
      31st Jan 2004
Hi!

I want to set up my win2k-Server as a dns-server which resolves the
ip's from the lan (Active Directory) and forwards all other questions
to another dns-server (linux).
For security reason, I want to disable all other dns-traffic from
win2k despite from the linux-pc, so I tried to delete all root-servers
(cause win2k seems to connect several times to them - but this traffic
is completly firewalled).

But: After I delete all root-server, it takes some hour/days
(reboot?), and suddenly all root-servers appears in the dns-settings
and I one again have the dns-traffic from win2k to the root servers.

Is there a way to completely delete the root-servers, so that they
never appears again? Or is there a reason, why I MUSt have
root-servers, which I don't recognized?!?

Best regards

Steff
 
Reply With Quote
 
 
 
 
Gary Fose [MSFT]
Guest
Posts: n/a
 
      31st Jan 2004
Steff,

The root hints (root server list) is kept in a file called cache.dns. There are two copies of this
file under the <systemroot>\System32\DNS folder. When you remove the list from the DNS
MMC, then reboot, they are put back because they load out of the cache.dns file. Clear the
root servers in the MMC and then delete/rename the cache.dns file (suggest renaming if you
ever want them back) and then they should not return.

But without them, understand if your forwarding DNS servers go down, your DNS will not be
able to resolve external names. The root hints server as a backup so to speak so you always
have DNS capability.

If you are seeing a lot of DNS traffic (more than you think you should), it is not the root hints
fault, as they just accept requests. There must be something else causing your issue. Most
likely some spyware/malware on your network making excessive DNS requests.

Hope this helps,
Gary
--------------------
'--'From: (E-Mail Removed) (Stefan Kirch)
'--'Newsgroups: microsoft.public.win2000.networking
'--'Subject: How to delete root-servers?
'--'Date: 31 Jan 2004 04:31:40 -0800
'--'Organization: http://groups.google.com
'--'Lines: 21
'--'Message-ID: <(E-Mail Removed)>
'--'NNTP-Posting-Host: 145.254.137.108
'--'Content-Type: text/plain; charset=ISO-8859-1
'--'Content-Transfer-Encoding: 8bit
'--'X-Trace: posting.google.com 1075552301 27453 127.0.0.1 (31 Jan 2004 12:31:41 GMT)
'--'X-Complaints-To: groups-(E-Mail Removed)
'--'NNTP-Posting-Date: Sat, 31 Jan 2004 12:31:41 +0000 (UTC)
'--'Path: cpmsftngxa07.phx.gbl!cpmsftngxa06.phx.gbl!cpmsftngxa09.phx.gbl!
TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-online.de!newsfeed.icl.net!
newsfeed.fjserv.net!colt.net!news.maxwell.syr.edu!postnews1.google.com!not-for-mail
'--'Xref: cpmsftngxa07.phx.gbl microsoft.public.win2000.networking:53289
'--'X-Tomcat-NG: microsoft.public.win2000.networking
'--'
'--'Hi!
'--'
'--'I want to set up my win2k-Server as a dns-server which resolves the
'--'ip's from the lan (Active Directory) and forwards all other questions
'--'to another dns-server (linux).
'--'For security reason, I want to disable all other dns-traffic from
'--'win2k despite from the linux-pc, so I tried to delete all root-servers
'--'(cause win2k seems to connect several times to them - but this traffic
'--'is completly firewalled).
'--'
'--'But: After I delete all root-server, it takes some hour/days
'--'(reboot?), and suddenly all root-servers appears in the dns-settings
'--'and I one again have the dns-traffic from win2k to the root servers.
'--'
'--'Is there a way to completely delete the root-servers, so that they
'--'never appears again? Or is there a reason, why I MUSt have
'--'root-servers, which I don't recognized?!?
'--'
'--'Best regards
'--'
'--' Steff
'--'


--

This posting is provided "AS IS" with no warranties, and confers no rights. Use of included
script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm

Note: For the benefit of the community-at-large, all responses to this message are best
directed to the newsgroup/thread from which they originated.

 
Reply With Quote
 
Marc Reynolds [MSFT]
Guest
Posts: n/a
 
      31st Jan 2004
You need to delete the "." zone and configure a fowarder to the Linux DNS
server. See 298148 HOWTO: Remove the Root Zone (Dot Zone)
http://support.microsoft.com/?id=298148

--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.


"Stefan Kirch" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Hi!
>
> I want to set up my win2k-Server as a dns-server which resolves the
> ip's from the lan (Active Directory) and forwards all other questions
> to another dns-server (linux).
> For security reason, I want to disable all other dns-traffic from
> win2k despite from the linux-pc, so I tried to delete all root-servers
> (cause win2k seems to connect several times to them - but this traffic
> is completly firewalled).
>
> But: After I delete all root-server, it takes some hour/days
> (reboot?), and suddenly all root-servers appears in the dns-settings
> and I one again have the dns-traffic from win2k to the root servers.
>
> Is there a way to completely delete the root-servers, so that they
> never appears again? Or is there a reason, why I MUSt have
> root-servers, which I don't recognized?!?
>
> Best regards
>
> Steff



 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
OT: Nine Root Servers? Doug Kanter Windows XP General 5 16th Mar 2006 10:30 PM
address of root name servers? Ben Microsoft Windows 2000 DNS 4 22nd May 2005 05:38 PM
root-servers.net in my Netstat info, why are the root servers always there? Derek Microsoft Windows 2000 1 6th May 2005 01:08 PM
How to delete root-servers? Stefan Kirch Microsoft Windows 2000 DNS 6 2nd Feb 2004 02:19 PM
DNS root servers =?Utf-8?B?RG9taW5paw==?= Microsoft Windows 2000 DNS 12 11th Jan 2004 08:51 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 07:05 PM.