DNS Ports and WAN Time-outs

[Neebski]

Alright, Im running my dns server with the default windows firewall on. I add
the ports for dns (port 53 right?) anyway with the firewall running web dns
querys cannot be done it just times out, But when I turn off the firewall
everything works like normal.

Any suggestions would be awesome!

Thanks
Kevin Neberman

[Kevin D. Goodknecht Sr. [MVP]]

In news:156730B7-B5AC-4F91...@microsoft.com,
Neebski <Nee...@discussions.microsoft.com> commented
Then Kevin replied below:

Even with the firewall on and no ports open you should be able to make
outgoing connections.
Unless you are using the packet filtering option on the interface. which,
blocks incoming and outgoing connections. This type of packet filtering is
not easy to set up for outgoing conections, by the time you open all the
ports for outgoing connections you just as welll turn it off and get a real
firewall.

--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

[Steve Head]

Not totally clear about the problem, but it sounds like you are saying that
it is not allowing connections out to make queries against external DNS
servers.

1. You should ensure that TCP and UDP 53 are opened. TCP 53 is used for
DNS transfers and large DNS queries over 512 bytes. UDP 53 is used for
typical Dns queries.

2. Taken from http://support.microsoft.com/default.aspx?scid=kb;en-us;813965
You can use the SendPort registry entry to specify a port that the DNS
server uses to send recursive UDP queries to other DNS servers. By default,
the DNS server sends recursive UDP queries through a randomly selected port
that is named the DNS port. The SendPort entry directs the DNS server to use
a particular port. You may want to add the SendPort entry to the registry if
you want to use port 53 or another port.

If the value of the SendPort entry is 0 or if the entry does not appear in
the registry, DNS randomly selects a port.

Steve