2K DNS server behind a Firewall makes it not work...HELP

[cmstanphill]

I have a windows 2K server thats a DNS server and when the Firewall is on it does nothing. any ideas?
I have many NT DNS servers and have no problems.
Thanks
Chad

 

[TheOtherKiwi]

You have answered your own question. The firewall is blocking several ports required by DNS. Run netstat -a at the command prompt and see what is up or down and create firewall rules accordingly.

Sounds like you need to redesign the firewall config...additional DMZs may help so that the DNS can communicate on the inside of your network...depending on your requirements it may be somewhat risky to have the DNS function on the firewall.

 

[peterve]

you need TCP and UDP ports 53 for DNS resolution & DNS queries... check if your firewall allows it..
also, it is not a good idea to run a firewall on a Win2K DC or DNS server... you will have to open up so many ports to get it working,... it is simply not secure ! --------------------------------------------------------------------
How can I believe in God when just last week I got my tongue caught in the roller of an electric typewriter?
---------------------------------------------------------------------
I have not failed, I've just found 10,000 ways that don't work
---------------------------------