RE: [SonicWALL]- DNS set to use forwarders

[mikesub]

what forwarding does is if the internal dns cannot answer a dns request then it forwards the request to an external dns and then is supposed to get a return answer it then feeds to the internal dns client. this is done so that all the client machines don't choke your bandwidth with dns queries when the internal dns server doesn't have the answer in its cache. so do I need to open port 53 on the firewall to the internal dns server so that it can get the answer to it's queries from the external dns server? I'm not sure

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jeff Vogt
Sent: Thu, April 11, 2002 1:11 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [SonicWALL]- DNS set to use forwarders

if your dns server is answering requests for internal clients only, then you do not need to create any additional rules or open ports, the default rule already allows this outbound dns traffic.  if you want your dns to answer external requests, then yes you need to allow for it.

 

all this assuming the server is behind the firewall (not in the dmz)

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 11, 2002 10:08 AM
To: [EMAIL PROTECTED]
Subject: [SonicWALL]- DNS set to use forwarders

do I need to open the dns port if my internal dns server (configured as a dns forwarder) is set to use my isp's dns to forward requests it cannot answer?

----------------------------------------------------------------------------------------------------------
Michael D. Plotsker
Technology Consultant
KJ Technology Consulting, Inc.
Office: 718-575-1595
Mobile: 917-406-4215
Fax: 212-202-5013
mailto:[EMAIL PROTECTED]