<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Arial,Helvetica,sans-serif;" dir="ltr">
<p>Hi Experts,</p>
<p><br>
</p>
<p>Is there a easy way to turn off/ Disable the DNS server to stop listening the requests over TCP and turn it ON whenever required?
<br>
</p>
<p><br>
</p>
<p>I would want to test where</p>
<p>a. I would be able to send the request to a DNS Server over TCP and DNS Server rejects the Incoming message over TCP</p>
<p>b. Later, I would want to turn it ON and check whether DNS Server accepts TCP Requests<br>
</p>
<p><br>
</p>
<p>My DNS Server has only the below options as of now</p>
<p><br>
</p>
<p></p>
<table role="table" class="ms-rteTable-default" style="border-collapse:collapse;border:1px solid rgb(198, 198, 198);table-layout:fixed" cellspacing="0">
<tbody>
<tr class="ms-rteTableEvenRow-default" style="border-collapse:collapse;border:1px solid rgb(198, 198, 198);background-color:rgba(255, 255, 255, 0.85)">
<td class="ms-rteTableEvenCol-default" style="border-collapse:collapse;border:1px solid rgb(198, 198, 198);width:641px">
<div>options {<br>
<br>
# The directory statement defines the name server's working directory<br>
<br>
directory "/var/lib/named";<br>
<br>
# enable DNSSEC validation<br>
#<br>
# If BIND logs error messages about the root key being expired, you<br>
# will need to update your keys. See https://www.isc.org/bind-keys<br>
#<br>
# dnssec-enable yes (default), indicates that a secure DNS service<br>
# is being used which may be one, or more, of TSIG<br>
# (for securing zone transfers or DDNS updates), SIG(0)<br>
# (for securing DDNS updates) or DNSSEC.<br>
<br>
#dnssec-enable yes;<br>
<br>
# dnssec-validation yes (default), indicates that a resolver<br>
# (a caching or caching-only name server) will attempt to validate<br>
# replies from DNSSEC enabled (signed) zones. To perform this task<br>
# the server also needs either a valid trusted-keys clause<br>
# (containing one or more trusted-anchors or a managed-keys clause.<br>
<br>
#dnssec-validation auto;<br>
managed-keys-directory "/var/lib/named/dyn/";<br>
<br>
# Write dump and statistics file to the log subdirectory. The<br>
# pathenames are relative to the chroot jail.<br>
<br>
dump-file "/var/log/named_dump.db";<br>
statistics-file "/var/log/named.stats";<br>
<br>
# The forwarders record contains a list of servers to which queries<br>
# should be forwarded. Enable this line and modify the IP address to<br>
# your provider's name server. Up to three servers may be listed.<br>
<br>
#forwarders { 192.0.2.1; 192.0.2.2; };<br>
<br>
# Enable the next entry to prefer usage of the name server declared in<br>
# the forwarders section.<br>
<br>
#forward first;<br>
<br>
# The listen-on record contains a list of local network interfaces to<br>
# listen on. Optionally the port can be specified. Default is to<br>
# listen on all interfaces found on your system. The default port is<br>
# 53.<br>
<br>
#listen-on port 53 { 127.0.0.1; };<br>
<br>
# The listen-on-v6 record enables or disables listening on IPv6<br>
# interfaces. Allowed values are 'any' and 'none' or a list of<br>
# addresses.<br>
<br>
listen-on-v6 { any; };<br>
<br>
# The next three statements may be needed if a firewall stands between<br>
# the local server and the internet.<br>
<br>
#query-source address * port 53;<br>
#transfer-source * port 53;<br>
#notify-source * port 53;<br>
# The allow-query record contains a list of networks or IP addresses<br>
# to accept and deny queries from. The default is to allow queries<br>
# from all hosts.<br>
<br>
#allow-query { 127.0.0.1; };<br>
<br>
# If notify is set to yes (default), notify messages are sent to other<br>
# name servers when the the zone data is changed. Instead of setting<br>
# a global 'notify' statement in the 'options' section, a separate<br>
# 'notify' can be added to each zone definition.<br>
<br>
notify no;<br>
<br>
disable-empty-zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";<br>
};<br>
</div>
<br>
</td>
</tr>
<tr class="ms-rteTableOddRow-default" style="border-collapse:collapse;border:1px solid rgb(198, 198, 198);background-color:rgba(255, 255, 255, 0.85)">
<td class="ms-rteTableEvenCol-default" style="border-collapse:collapse;border:1px solid rgb(198, 198, 198);width:641px" rowspan="1">
<br>
</td>
</tr>
</tbody>
</table>
<br>
<br>
<p>Regards</p>
<p>Harshith<br>
</p>
<p></p>
<p><br>
</p>
</div>
</body>
</html>