newton wrote:
> Hi,
>
> At first, excuse my poor english.
>
> I have installed a DNS server on my Windows 2003 with Active Directory
> (I already know that this group is for W2000, but the W2003 group has
> low activity).
Pretty much every question gets answered in the Win2003 groups for
DNS and AD.
> By default, the server came configured for use an external DNS server
> if the request domain insn't in my DNS database. I have delete the
> reference to this external DNS server from the "forwarder" list, but I
> can continue resolve domain name that isn't in my DNS server.
It is likely recursing. (Using the root hints.)
There are two ways a DNS server can resolve a name
it doesn't hold:
1) Physically recurse the name space from the root down
2) Forward to another DNS server to do the job
You have disabled Forwarding; presumably your server is
still recursing.
> Should I need modified other option??
IF (and ONLY IF) you have no need to resolve any other zone
(which is NORMAL for a public DNS server) then you can
check the ADVANCED OPTIONS: DISABLE RECURSION (also disables
forwarding.)
What this option does (even on Win2000 where it is partially
mislabeled) is to PREVENT the DNS server from resolving ANYTHING
not available to it locally (i.e., from it's own info.)
> Best regards!
>
--
Herb
|