ADS and DNS issues

[Guest]

I am currently studying for my MCSA, and I have configured my home network to
use ADS. Currently, there is one W2K ADS DC, which is, of course, the root
server. There is one host, running XP Pro. I am using internal IP
addresses, 10.3.3.x. The problem is that every time I access directory
resources on the XP host, I lose the ability to resolve hostnames outside of
my network, untill I restart the DNS client service. I have configured my
network adapter to use my internal DNS address and one ISP server for
resolution, configuring two ISP DNS servers and my internal DNS server, etc.
Originally, I believed it was the DNS masq service running on my firewall, so
I removed the firewall from the equation, and the problem still exists.
Currently, the setup is this : CableModem >> Linksys WRT54G >> Port 1:Serverthe DNS Server, and it will not allow forwarding due to being the root
server. Any advice or recommendations will be appreciated.

 

[Kurt]

You can't use your ISPs DNS server at all. DNS serverd are not queried by
the DNS client service one after another. They are queried only until a
reply is received. If the reply is "NX domain", it won't go on and ask the
next server in your list, it accepts this answer. Since your ISP knows
nothing of your internal domain, if your ISPs DNS server is queried for a
local record, you'll get a "not found" of some kind. What you need to do is
either delete the root zone ( "." ) - just right click and delete it. Or you
can add your ISPs DNS server as a forwarder in your DNS servers properties.
Then you client will request an off-site name from your server. If it
doesn't exist in the local database it will forward the query to the
forwarder and return the result to your client.

If you just have one client computer, I'd just delete the root zone and let
your DNS server do all the lookups for you. Obviously your DNS server must
have Internet access for this to work. The main thing is to have ONLY your
AD dns server listed as a resolver in your client's TCP/IP properties.

.....kurt

 

[Guest]

Yep, deleting the root domain resolved it. Thank you very much!