Limit Recursion to Certain Subnets

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

How do I limit recursion to just my client PCs? I don't want the worl to be
able to use my servers for recursive lookups but there needs to be access to
the server for zone transfers. This is very easily done in BIND, is this not
possible in Windows DNS?
 
Travis said:
How do I limit recursion to just my client PCs? I don't want the
worl to be able to use my servers for recursive lookups but there
needs to be access to the server for zone transfers. This is very
easily done in BIND, is this not possible in Windows DNS?
Click to expand...

No, it is not possible with MS DNS.
 
Travis said:
How do I limit recursion to just my client PCs? I don't want the worl to
be
able to use my servers for recursive lookups but there needs to be access
to
the server for zone transfers.
Click to expand...

Then don't put you INTERNAL DNS and EXTERNAL DNS
on the same server/DNS service.

Your EXTERNAL DNS belongs at the REGISTRAR in
almost all cases anyway.
This is very easily done in BIND, is this not
possible in Windows DNS?
Click to expand...

Yes, it is possible and also a VERY POOR practice
when done.

Internal and External DNS services should ALWAYS
be separated. Most BIND experts will tell you this too.

Just because you can do something doesn't mean it is the
right thing to do.
 
Back
Top