Internet access

Hi,

I have in total 3 DCs. When the primary is down, we are unable to access the
Internet. Both of the other DCs are DNS servers. When the primary is down,
access is availavble to all other recources. Any one ony ideas on this/

Thanks
--
RJ

Hello Bobj,

Did you configure the FORWARDERS on the other DNS server properties in the
DNS management console?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi,
>
> I have in total 3 DCs. When the primary is down, we are unable to
> access the Internet. Both of the other DCs are DNS servers. When the
> primary is down, access is availavble to all other recources. Any one
> ony ideas on this/
>
> Thanks
>

"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:. com...

Or possibly a firewall rule not allowing any of the other DNS servers
outbount or inbound UDP & TCP 53?

Ace



> Hello Bobj,
>
> Did you configure the FORWARDERS on the other DNS server properties in the
> DNS management console?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hi,
>>
>> I have in total 3 DCs. When the primary is down, we are unable to
>> access the Internet. Both of the other DCs are DNS servers. When the
>> primary is down, access is availavble to all other recources. Any one
>> ony ideas on this/
>>
>> Thanks
>>
>
>

Hi,

Thanks for the reply. The firewall is configured ok. I'll check the
forwarders on the other machines.


Thanks again.
--
RJ


"Meinolf Weber [MVP-DS]" wrote:

> Hello Bobj,
>
> Did you configure the FORWARDERS on the other DNS server properties in the
> DNS management console?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi,
> >
> > I have in total 3 DCs. When the primary is down, we are unable to
> > access the Internet. Both of the other DCs are DNS servers. When the
> > primary is down, access is availavble to all other recources. Any one
> > ony ideas on this/
> >
> > Thanks
> >
>
>
> .
>

Hi,

I have checked the DNS forwarding on the other DCs and they are set the same
as the PDC.

Thanks


--
RJ


"Meinolf Weber [MVP-DS]" wrote:

> Hello Bobj,
>
> Did you configure the FORWARDERS on the other DNS server properties in the
> DNS management console?
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi,
> >
> > I have in total 3 DCs. When the primary is down, we are unable to
> > access the Internet. Both of the other DCs are DNS servers. When the
> > primary is down, access is availavble to all other recources. Any one
> > ony ideas on this/
> >
> > Thanks
> >
>
>
> .
>

"Bobj" <> wrote in message
news:CBF8721C-E4CA-4FEB-A08C-...
> Hi,
>
> I have checked the DNS forwarding on the other DCs and they are set the
> same
> as the PDC.
>
> Thanks
>
>
> --
> RJ
>
>

Which DNS addresses are the clients setup with? Do they have that DC in
question as the first entry in their DNS list? Post an ipconfig /all from
one of your workstations, please.

Ace

Hi Ace,

Thanks for your reply. I have been checking over the config on all 3 DNS
servers. The primary, (A)is set up for forwarding. On the second,(B) the
check box for 'Do not Allow Recursion for this domain' is checked. The
third,(C)is set up with forwading pointed to B. Would it be advisable to
uncked the box and have both A and B allowing recursion?. The IP config is
set by DHCP and DNS Server B is listed first, which is what the ultimate goal
is as we plan to decommission A.

Thanks
--
RJ


"Ace Fekay [MCT]" wrote:

> "Bobj" <> wrote in message
> news:CBF8721C-E4CA-4FEB-A08C-...
> > Hi,
> >
> > I have checked the DNS forwarding on the other DCs and they are set the
> > same
> > as the PDC.
> >
> > Thanks
> >
> >
> > --
> > RJ
> >
> >
>
> Which DNS addresses are the clients setup with? Do they have that DC in
> question as the first entry in their DNS list? Post an ipconfig /all from
> one of your workstations, please.
>
> Ace
>
>
> .
>

Hello Bobj,

Configure the FORWARDERS tab in all DNS servers to your ISP, so you are save
regardless which DC/DNS is not available. Do not forward between domain DNS
servers.

If "Do not use recursion for this domain" is enabled, the DNS server will
pass the query to forwarders, but will not recursively query any other DNS
servers, if the forwarders cannot resolve the query.

Do not disable recursion on a DNS server if it is used by other DNS servers
for server-level forwarding, or if DNS client computers use it for name resolution.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi Ace,
>
> Thanks for your reply. I have been checking over the config on all 3
> DNS servers. The primary, (A)is set up for forwarding. On the
> second,(B) the check box for 'Do not Allow Recursion for this domain'
> is checked. The third,(C)is set up with forwading pointed to B.
> Would it be advisable to uncked the box and have both A and B allowing
> recursion?. The IP config is set by DHCP and DNS Server B is listed
> first, which is what the ultimate goal is as we plan to decommission
> A.
>
> Thanks
>
> "Ace Fekay [MCT]" wrote:
>
>> "Bobj" <> wrote in message
>> news:CBF8721C-E4CA-4FEB-A08C-...
>>
>>> Hi,
>>>
>>> I have checked the DNS forwarding on the other DCs and they are set
>>> the
>>> same
>>> as the PDC.
>>> Thanks
>>>
>>> -- RJ
>>>
>> Which DNS addresses are the clients setup with? Do they have that DC
>> in question as the first entry in their DNS list? Post an ipconfig
>> /all from one of your workstations, please.
>>
>> Ace
>>
>> .
>>

Hi Meinolf,

Thanks for your reply. Could I just clarify then, Server C should not be
forwarded to B, and I should uncheck the ' Do not use recursion for this
domain' box on Server B as this will service DNS requests from client PCs.

Regards
--
RJ


"Meinolf Weber [MVP-DS]" wrote:

> Hello Bobj,
>
> Configure the FORWARDERS tab in all DNS servers to your ISP, so you are save
> regardless which DC/DNS is not available. Do not forward between domain DNS
> servers.
>
> If "Do not use recursion for this domain" is enabled, the DNS server will
> pass the query to forwarders, but will not recursively query any other DNS
> servers, if the forwarders cannot resolve the query.
>
> Do not disable recursion on a DNS server if it is used by other DNS servers
> for server-level forwarding, or if DNS client computers use it for name resolution.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hi Ace,
> >
> > Thanks for your reply. I have been checking over the config on all 3
> > DNS servers. The primary, (A)is set up for forwarding. On the
> > second,(B) the check box for 'Do not Allow Recursion for this domain'
> > is checked. The third,(C)is set up with forwading pointed to B.
> > Would it be advisable to uncked the box and have both A and B allowing
> > recursion?. The IP config is set by DHCP and DNS Server B is listed
> > first, which is what the ultimate goal is as we plan to decommission
> > A.
> >
> > Thanks
> >
> > "Ace Fekay [MCT]" wrote:
> >
> >> "Bobj" <> wrote in message
> >> news:CBF8721C-E4CA-4FEB-A08C-...
> >>
> >>> Hi,
> >>>
> >>> I have checked the DNS forwarding on the other DCs and they are set
> >>> the
> >>> same
> >>> as the PDC.
> >>> Thanks
> >>>
> >>> -- RJ
> >>>
> >> Which DNS addresses are the clients setup with? Do they have that DC
> >> in question as the first entry in their DNS list? Post an ipconfig
> >> /all from one of your workstations, please.
> >>
> >> Ace
> >>
> >> .
> >>
>
>
> .
>

"Bobj" <> wrote in message
news:A7C77B00-ED9E-410F-AE69-...
> Hi Meinolf,
>
> Thanks for your reply. Could I just clarify then, Server C should not be
> forwarded to B, and I should uncheck the ' Do not use recursion for this
> domain' box on Server B as this will service DNS requests from client PCs.
>
> Regards
> --
> RJ

That is correct. Forwarding like that between DCs will cause a forwarding
loop condition, and the query TTL will timeout never getting what the
original client resolver requested. In a single domain scenario, such as
what you have, as Meinolf said, forward ALL of your DNS servers to the ISP,
never to each other.

Don't bother with the "Do Not Use recursion" checkbox. That just tells it to
not use the Root hints. If the Forwarders are worth their salt, it will
never hit the Roots anyway.

Ace