Conditional Forwarding

Bob

unread,

May 3, 2007, 9:11:00 AM5/3/07

to

Hi all,

I created a conditional forwarder to another forest and added 3 forwarder IP
addresses to three DC's at that forest. There is a 5 second query time out
and the "do not use recursion for this domain" is un-checked.

I find that if the first IP address is not available, the forwarder doesn't
try the next IP address in the list. If I manually move the next (working)
IP address up in the list, thus placing the failing IP address as second, I
can now ping the domain.

Any ideas on what I set up incorrectly?

Also, am I correct in my observation that conditional forwarders do not
replicate between DNS servers, but stub zones do?

Thanks!
--
Bob

Ken Zhao [MSFT]

unread,

May 3, 2007, 11:32:04 PM5/3/07

to

Hello Bob,

Thank you for using newsgroup!

By default, the DNS Client service asks the server to use a process of
recursion to fully resolve names on behalf of the client before returning
an answer. In most cases, the DNS server is configured, by default, to
support the recursion process. A referral answer contains additional
resource records not specified by name or type in the query. This type of
answer is returned to the client if the recursion process is not supported.
The records are meant to act as helpful reference answers that the client
can use to continue the query using iteration.

Disabling the use of recursion on a DNS server is generally done when DNS
clients are being limited to resolving names to a specific DNS server, such
as one located on your intranet. Recursion might also be disabled when the
DNS server is incapable of resolving external DNS names, and clients are
expected to fail over to another DNS server for resolution of these names.

Configure a DNS server to use forwarders
http://technet2.microsoft.com/windowsserver/en/library/ee992253-235e-4fd4-b4
da-7e57e70ad3821033.mspx?mfr=true

How DNS query works
http://www.microsoft.com/windows/windows2000/en/advanced/help/sag_DNS_und_Ho
wDnsWorks.htm

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Kevin D. Goodknecht Sr. [MVP]

unread,

May 4, 2007, 12:16:02 PM5/4/07

to

Read inline please.

In news:B9DC2C57-C692-4D21...@microsoft.com,
Bob <86c6c2e6-...@news.postalias> typed:

> Hi all,
>
> I created a conditional forwarder to another forest and added 3
> forwarder IP addresses to three DC's at that forest. There is a 5
> second query time out and the "do not use recursion for this domain"
> is un-checked.
>
> I find that if the first IP address is not available, the forwarder
> doesn't try the next IP address in the list. If I manually move the
> next (working) IP address up in the list, thus placing the failing IP
> address as second, I can now ping the domain.
>
> Any ideas on what I set up incorrectly?

Check the box, "Do not use recursion for this domain" This will cause your
DNS to check all forwarders and will not fall back to using its own
recursion (To the Root Hint servers)

>
> Also, am I correct in my observation that conditional forwarders do
> not replicate between DNS servers, but stub zones do?

This is correct, in this scenario, a Stub zone may be more reliable because
the stub has a list of NS records it can use to resolve names.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
Send IM: http://www.icq.com/people/webmsg.php?to=296095728

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and

benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

Ken Zhao [MSFT]

unread,

May 7, 2007, 4:10:08 AM5/7/07

to

Thanks Kevin!

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================

When responding to posts, please "Reply to Group" via your newsreader so

that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Reply-To: "Kevin D. Goodknecht Sr. [MVP]" <ad...@nospam.WFTX.US>
| From: "Kevin D. Goodknecht Sr. [MVP]" <ad...@nospam.WFTX.US>
| References: <B9DC2C57-C692-4D21...@microsoft.com>
| Subject: Re: Conditional Forwarding
| Date: Fri, 4 May 2007 11:16:02 -0500
| Lines: 58
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2900.3028
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
| Message-ID: <OvcqDemj...@TK2MSFTNGP04.phx.gbl>
| Newsgroups: microsoft.public.windows.server.dns
| NNTP-Posting-Host: ns2.lonestaramerica.com 65.65.91.210
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.dns:2774
| X-Tomcat-NG: microsoft.public.windows.server.dns

Ken Zhao [MSFT]

unread,

May 9, 2007, 6:25:38 AM5/9/07

to

Hi Bob,

I am just writing to see how everything is going. If you have any updates
or need any further assistance on this issue, please feel free to let me
know.

Thanks & Regards,

Ken Zhao

Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Bob

unread,

May 11, 2007, 11:58:02 AM5/11/07

to

Thanks for your insite (Kevin and Ken)!
--
Bob