>Once again, I know this is off topic, but I'm really having some troubles >with a DNS server in house. >It's a 1gig P4 with 512meg of ram, when I view the cpu usage it's never >more than 2 or 3% so I don't think it's a hardware issue.
>I'm running windows 2000 DNS services to handle DNS inside my firewall for >the web server, mail server, etc. etc. MS DNS has a huge DoS vulnerability in that you cannot limit recursion to mynetworks. Recursion is either on or off, for the world. If on, it means anybody on internet can rip off you DNS service, as well as DoS it by sending it millions of queries, that will be looked up. Not a good choice for a public DNS, just fine for intramurals. >I have a fairly small network (less than 150 pc's) and the response time >was great with only a few users. The second I loaded it up the performance >dropped dramatically. We have a full t1 to the internet, but it's reduced >to dialup speeds because the DNS lookup is so slow. >Any help anybody can give me with this would be greatly appreciated. I would suspect your firewall, esp if it's not very good at passing UDP, which is what standard queries use (AXFR uses tcp). Do you have a *nix box in house? if so, go use dig on it, as it will show you the RTT, round-trip-time, in milliseconds (dig on win32 doesn�t). dig using your slow NS and then dig through your firewall to your upstream DNS. If it's slow on the latter, then you know it's not a w2k problem. I doubt the problem is in w2k, more likely a network problem. Len www.menandmice.com/DNS-training : DNS Training BIND8NT.MEIway.com : ISC BIND for NT4 & W2K IMGate.MEIway.com : Build free, hi-perf, anti-abuse mail gateways Please visit http://www.ipswitch.com/support/mailing-lists.html to be removed from this list. An Archive of this list is available at: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Please visit the Knowledge Base for answers to frequently asked questions: http://www.ipswitch.com/support/IMail/
