DNS Problem TCP / UDP

W

William Stacey

DNS uses tcp for zone transfers. I don't believe you can configure a server
to do xfrs using udp. If your provider has tcp on 53 disabled, their dns is
not configured correctly and should be fixed or change providers. It is a
~simple matter to change dns providers if you want to host a secondary
yourself.
 
J

Jerome Schnitzler

Hello NG,

everytime I want to start a zonetransfer I recieve an error message like
"unable to do a zonetransfer over udp ... use tcp" or something like that.
My Problem is, that my provider uses UDP for zonetransfers. Does anybody
know how to configure my Windows 2003 to do zonetranfers over UDP?

Thanx for help...

Jerome
 
A

Ace Fekay [MVP]

In
William Stacey said:
DNS uses tcp for zone transfers. I don't believe you can configure a
server to do xfrs using udp. If your provider has tcp on 53
disabled, their dns is not configured correctly and should be fixed
or change providers. It is a ~simple matter to change dns providers
if you want to host a secondary yourself.


Or maybe UDP is not open at the entry point.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
J

Jerome Schnitzler

It might also be possible that my firewall is resposible for that problem. I
have a problem to get my port 53 away from the status "filtered". When I set
the IPSec rule to "open without security" I still get the result "filtered"
is there a scriptlet in VB or something like that, which might set that for
me ... it was easier under Linux :-/
 
A

Ace Fekay [MVP]

In
Jerome Schnitzler said:
It might also be possible that my firewall is resposible for that
problem. I have a problem to get my port 53 away from the status
"filtered". When I set the IPSec rule to "open without security" I
still get the result "filtered" is there a scriptlet in VB or
something like that, which might set that for me ... it was easier
under Linux :-/
There must be some other setting stopping it. Disable it and see if it
works. If using IPSec just for filtering, I suggest that it's better off to
have an entry point firewall to take care of the whole network.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top