DNS Server Properties Facts Flashcards
Interfaces
The Interfaces tab identifies the IP addresses DNS uses to listen for DNS queries. Uncheck IP addresses that you do not want DNS to use for queries.
Choosing this option does not restrict IP address use. The only mechanism that can restrict traffic to the DNS server is a firewall.
Forwarders
The Forwarders tab identifies DNS servers that queries are sent to when the local DNS server is not authoritative.
Root Hints
The Root Hints tab identifies the root servers on the internet.
Debug Logging
The Debug Logging tab allows you to set detailed logging parameters for advanced troubleshooting, including:
Packet direction and transport protocol.
Packet content and packet type.
Other options:
Log unmatched incoming response packets
Details
Filter packet by IP address
The log file location and maximum size.
Event Logging
The Event Logging tab allows you to specify events to log. Options include:
No events
Errors only
Errors and warnings
All events
Monitoring
On the Monitor tab, you can run a simple or recursive query against the DNS server to verify that it is working properly.
Security
On the Security tab, you can configure permissions to allow users or groups to manage the DNS server.
Advanced
Server options on the Advanced tab are:
Disable recursion—disables forwarding and the local DNS client.
Enable BIND secondaries—allows the Microsoft DNS server to communicate with UNIX DNS servers.
Fail on load if bad zone data—prevents zone data from loading if it is found to be incorrect or corrupt.
Enable round robin—enables cycling through records when there are multiple records of the same type with the same name.
Enable netmask ordering—provides the requester with the record that most closely matches the requester IP address when there are multiple records of the same type that have the same name.
Secure cache against pollution—protects the cache by not updating an entry when a request sent to one domain results in a response from another domain.
Enabling automatic scavenging of stale records—removes records that haven’t been updated within a specified period of time.
You must set aging and scavenging on both the server and the zone. In the zone properties, the ability to scavenge stale records is enabled or disabled. In addition, the no-refresh interval and the refresh interval parameters can be configured.
The no-refresh interval specifies a time period where updates to DNS records are not allowed. After this time period, the record can be updated for the period of time specified by the refresh interval. Scavenging removes only stale records that have not been updated after the refresh interval has expired.
