minimal-responses yes; to prevent downstream MS DNS server following DNS delegations

[Spain, Dr. Jeffry A.]

In the Windows DNS Manager, open the Properties page of the applicable DNS server. On the Forwarders tab, click Edit and enter the IP address(es) of the BIND server(s) to which you want the Windows DNS server to forward queries. Click OK, and now back on the Forwarders tab, uncheck "Use root hints if no forwarders are available." That will constrain the Windows DNS server to using only the BIND servers you have configured. This description is for Windows Server 2008 R2 DNS, but similar functionality is available for other Windows versions.

Jeffry A. Spain
Network Administrator
Cincinnati Country Day School

________________________________________
Sent: Tuesday, May 03, 2011 4:16 AM
To: bind-users at lists.isc.org
Subject: minimal-responses yes; to prevent downstream MS DNS server following   DNS delegations

> My main goal is to prevent the internal MS DNS server from trying to
> communicate with DNS servers outside the internal network zone
> following delegations. Such communication will be dropped in
> firewalls. Instead I want the internal MS DNS server to follow the
> generic DNS forwarding configured.