Win2K3 DNS "SERVFAIL" vs "REFUSED"
bmn
Hello everyone,
I have this authoritative server working right but after I "disabled
recursion" I get a SERVFAIL return code (on all queries outside its
domain). It is working right , as it is not providing an answer for
hostnames outside the zone it controls, but I think a "REFUSED" answer
would be more appropriate.
Is this the default behaviour (return SERVAIL) when disabling
recursion? if not..what am I missing?
Thanks in advance!
--
bmn
------------------------------------------------------------------------
bmn's Profile: http://forums.techarena.in/members/bmn.htm
View this thread: http://forums.techarena.in/server-dns/1137049.htm
Kevin D. Goodknecht [MVP]
"bmn" <bmn.3...@DoNotSpam.com> wrote in message
news:bmn.3...@DoNotSpam.com...
>
> Hello everyone,
>
> I have this authoritative server working right but after I "disabled
> recursion" I get a SERVFAIL return code (on all queries outside its
> domain). It is working right , as it is not providing an answer for
> hostnames outside the zone it controls, but I think a "REFUSED" answer
> would be more appropriate.
>
> Is this the default behaviour (return SERVAIL) when disabling
> recursion? if not..what am I missing?
>
> Thanks in advance!
It's proper response should be a referral to the Root Servers or TLD
servers, but since recursion is disabled, and you apparently don't have a
delegated Root Zone with NS records for the Root servers, all it can answer
is SERVFAIL.
You can download a fully delegated Root Zone from Internic, the follow these
instructions to install the zone, then it will give the proper response.
294906 - How to Delegate All Internet Top-Level Domains on an Internal Root
DNS Server
http://support.microsoft.com/default.aspx?scid=kb;en-us;294906
--
--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================