A Sysadmin’s DNS Best Practices

Advanced Search

March 27, 2008 A Sysadmin’s DNS Best Practices A Web Exclusive from Windows IT Pro Apostolos Fotakelis IT Pro Hero InstantDoc #98331 Windows IT Pro	Email this Article Printer Friendly Reader Comments Digg This Del.icio.us RSS
Subscribe to Windows IT Pro \| See More Domain Name System (DNS) Articles Here \| Reprints \| Or get the Monthly Online Pass—only $5.95 a month!

Main Article Tried-and-True DNS Wisdom

Create DNS zones in internal DNS servers to fight some obvious Web ads.
Use OpenDNS (www.opendns.com) DNS servers as forwarders, to add an extra layer of security.
Block the exact DNS protocols (UDP, TCP, or both) on the edge—the firewall—and on the server. Also, lock down the DNS server. I’ve found Windows Server 2003 SP1’s security configuration wizard very useful for these two tasks.
Use Active Directory (AD)–integrated zones and secure dynamic updates.
Restrict DNS replication only to the necessary DNS servers.
Implement split DNS, if applicable.
Use DNSstuff (www.dnsstuff.com) to get useful additional information—also helpful for troubleshooting.
Get rid of NetBIOS over TCP and WINS. (Windows Server 2008 has a special DNS zone that eliminates the need for a WINS server.)
Develop your own best practices list!

End of Article

This is very helpful. I did not know about this and will make the changes ASAP!.

Thank you.

Anormal March 27, 2008 (Article Rating:

)

You must be a registered user or online subscriber to comment on this article. Please log on before posting a comment. Are you a new visitor? Register now

Top Viewed ArticlesView all articles

Command Prompt Tricks

One reader shares his tip for setting up the command prompt to reflect a remote path. ...

WinInfo Short Takes: Week of November 9, 2009

An often irreverent look at some of the week's other news, including some more Windows 7 sales momentum, some Sophos stupidity, Microsoft's cloud computing self-loathing, more whining from the browser makers, Zoho's "Fake Office," and much, much more ...

Understanding File-Size Limits on NTFS and FAT

A general confusion about files sizes on FAT seems to stem from FAT32's file-size limit of 4GB and partition-size limit of 2TB. ...

Networking Whitepapers Should Your Email Live in the Cloud?

Will Your Next Generation Server System Meet Your Infrastructure Optimization Needs?

Continuous Data Protection and Recovery for Microsoft Exchange

Related Events Managing IT Across Multiple Locations

No Do Overs – Get Virtualization Right the First Time

7 Ways To Get More From Your SharePoint Deployment Now

Check out our list of Free Email Newsletters!

Networking eBooks Spam Fighting and Email Security for the 21st Century

Understanding and Leveraging Code Signing Technologies

SQL Server Administration for Oracle DBAs

Related Networking Resources Introducing Left-Brain.com, the online IT bookstore
Looking for books, CDs, toolkits, eBooks? Prime your mind at Left-Brain.com

Discover Windows IT Pro eLearning Series!
Clear & detailed technical information and helpful how-to's, all in our trademark no-nonsense format

ADS BY GOOGLE

Job Openings in IT		SPONSORED LINKS		FEATURED LINKS
		EMC SAN vs. DAS Exchange 2007 Calculator Calculate your savings now! Let Your Users Reset Their Own Passwords: Free Download Try a 30 day free trial of Desktop Authority Password Self-Service – it provides an easy-to-use, robust system for allowing users to reset their own forgotten passwords or locked accounts.		Disaster Recovery Strategies – Tips and Tricks Determine how you can achieve your DR objectives as simply and cost-effectively as possible. Get Windows IT Pro & Mark Minasi’s Favorite Power Tools Guide Order Windows IT Pro now and get "More of Mark Minasi's Favorite Power Tools"--a in-depth guide to the most useful Windows commands --FREE with your paid order! Subscribe today, and save 58% off the cover price! Migration, Virtualization, Availability, and Desktop Management Realize the importance of a workload optimization strategy...it can affect your bottom line! Deep Dive into VMware vSphere, eLearning Series Join John Savill to explore the major functionality capabilities of the vSphere virtualization platform, including identification of the changes from ESX 3.5.

Windows IT Pro Home

FAQ for Windows

WinInfo News
Europe Edition

About Us

Media Kit

Affiliates / Licensing

SQL Server Magazine

Office & SharePoint Pro

DevProConnections

IT Job Hound
Left-Brain.com

Technology Resource Directory

asp.netPRO

ITTV

Windows SuperSite