Windows Server 2003 DNS 新增功能 林寶森 jeffl@ms11.hinet.net

2003 DNS 的新增功能 Stub Zone Conditional Forwarding Local Subnet Priority Round-robin Rotation Disabling Recursion Store DNS Data in Application Partition of Active Directory

Fully Qualified Domain Name FQDN = Host Name + Domain Name Example: www.abc.com.tw www is Host Name abc.com.tw is Domain Name

What is a DNS Zone? abc.com.tw west south support sales training north

What Are DNS Zone Types? Zones Description Primary Read/write copy of a DNS database Secondary Read-only copy of a DNS database Stub Copy of a zone containing limited records Read/Write Read-Only Copy of limited records

Multiple Domain 的名稱解析 Windows 2000 Server Windows Server 2003 公司自行成立 DNS Root Server，所有的 DNS Server皆修改 Root Hints 指向公司的 Root Server。 DNS Server 互相做對方的 Secondary DNS Server 互相 Forwarding Windows Server 2003 Stub Zone Conditional Forwarding

Server Default Preferences Property Default setting Disable recursion Off BIND secondaries On Fail on load if bad zone data Enable round robin Enable netmask ordering Secure cache against pollution Name checking Multibyte (UTF8) Load zone data on startup From Active Directory and registry Enable automatic scavenging

DNS Server Roles Role Situation Caching-only servers A remote office has a limited amount of available bandwidth Non-recursive servers You have Internet-facing DNS that are authoritative for one or more zones Forward-only servers You want to manage the DNS traffic between your network and the Internet Conditional forwarders You want DNS clients in separate networks to resolve each others’ names without having to query the DNS server on the Internet

Using Caching-Only Servers Perform name resolution on behalf of client computers and cache the results Can be used to reduce DNS-related traffic across a WAN Caching-Only DNS Server Client Remote Office DNS Server Corporate Headquarters Slow WAN Link

NSLOOKUP 指令 set OPTION - set an option [no]recurse - ask for recursive answer to query domain=NAME - set default domain name to NAME type=X - set query type (ex. A, ANY, CNAME, MX, NS) querytype=X - same as type [no]msxfr - use MS fast zone transfer ixfrver=X - current version to use in IXFR transfer request server NAME - set default server to NAME ls [opt] DOMAIN - list addresses in DOMAIN -a - list canonical names and aliases -d - list all records -t TYPE - list records of the given type (e.g. A, CNAME, MX, etc.)

用 NSLOOKUP 解決下列問題 使用者抱怨有些網站無法連結 廠商或客戶連不上公司網站 廠商或客戶的電子郵件收不到 廠商或客戶的電子郵件寄不過去 強迫別人的 DNS 學習的方式