Can / should I prevent my domain controller doing forward lookups for remote users?

Posted by markmnl on Server Fault See other posts from Server Fault or by markmnl
Published on 2012-08-28T01:44:12Z Indexed on 2012/08/28 3:40 UTC
Read the original article Hit count: 546

Filed under:
|

I have a Windows Server 2003 server in the office. I VPN into the LAN remotely. My VPN has a virtual NIC with the Windows Server as the primary DNS since it is a domain controller. When connected to the VPN and I do a nslookup or simply browse the web my VPN's DNS (the office's Windows Server) provides the DNS answers - I beleive becuase it has DNS forwarders so queries it cant answer it forwards and then relays the answer. This is the desired behaviour for workstations in the office (they should query their domain controller first). However for remote VPN users this is not desirable - I do not want my remote office's server to answer DNS queries it is not the authority of (which happends to be 192.168.x.x). Is there any way I can configure this?

© Server Fault or respective owner

Related posts about windows-server-2003

Related posts about dns