Preventing DDNS Updates

I have a SBS2k3 box that is multihomed. One NIC is for the public internet
connection while the other is private side. I dont want the public NIC to
advertise its DNS info on my private DNS zone cause then 50% of the time
clients query the zone file, they will get this public IP, and its not a
fast connection. I have unchecked the "Register this connections address's
in DNS" in Advanced TCP/IP Settings, but it still seems to be updating the
zone file. Is there a registry entry that I need to modify?

Michael

Michael Sainz wrote:
> I have a SBS2k3 box that is multihomed. One NIC is for the public
> internet connection while the other is private side. I dont want the
> public NIC to advertise its DNS info on my private DNS zone cause
> then 50% of the time clients query the zone file, they will get this
> public IP, and its not a fast connection. I have unchecked the
> "Register this connections address's in DNS" in Advanced TCP/IP
> Settings, but it still seems to be updating the zone file. Is there a
> registry entry that I need to modify?


If the NIC binding order is set correctly, surely DNS queries from the
internal network should always resolve to the internal ip?

If you (repeatedly) do a 'nslookup SBS' at a client PC command prompt, do
you ever get the SBS's external ip?

James

Yes...i do.
"James Reather" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Michael Sainz wrote:
> > I have a SBS2k3 box that is multihomed. One NIC is for the public
> > internet connection while the other is private side. I dont want the
> > public NIC to advertise its DNS info on my private DNS zone cause
> > then 50% of the time clients query the zone file, they will get this
> > public IP, and its not a fast connection. I have unchecked the
> > "Register this connections address's in DNS" in Advanced TCP/IP
> > Settings, but it still seems to be updating the zone file. Is there a
> > registry entry that I need to modify?
>
>
> If the NIC binding order is set correctly, surely DNS queries from the
> internal network should always resolve to the internal ip?
>
> If you (repeatedly) do a 'nslookup SBS' at a client PC command prompt, do
> you ever get the SBS's external ip?
>
> James
>
>

KB292822

--
Jan Wakulicz
www.micropol.com.au


"Michael Sainz" <mike@twofatfrogs(remove).com> wrote in message
news:%(E-Mail Removed)...
> I have a SBS2k3 box that is multihomed. One NIC is for the public internet
> connection while the other is private side. I dont want the public NIC to
> advertise its DNS info on my private DNS zone cause then 50% of the time
> clients query the zone file, they will get this public IP, and its not a
> fast connection. I have unchecked the "Register this connections address's
> in DNS" in Advanced TCP/IP Settings, but it still seems to be updating the
> zone file. Is there a registry entry that I need to modify?
>
> Michael
>
>

Jan wrote:
> "Michael Sainz" <mike@twofatfrogs(remove).com> wrote in message
> news:%(E-Mail Removed)...
>> I have a SBS2k3 box that is multihomed. One NIC is for the public
>> internet connection while the other is private side. I dont want the
>> public NIC to advertise its DNS info on my private DNS zone cause
>> then 50% of the time clients query the zone file, they will get this
>> public IP, and its not a fast connection. I have unchecked the
>> "Register this connections address's in DNS" in Advanced TCP/IP
>> Settings, but it still seems to be updating the zone file. Is there
>> a registry entry that I need to modify?
>

> KB292822


Does that KB actually apply to Windows Server 2003? For Windows 2003, it
says the issue was fixed in SP3.

James Reather

Read article 246804. It is very thorough.

-ck

>-----Original Message-----
>I have a SBS2k3 box that is multihomed. One NIC is for
the public internet
>connection while the other is private side. I dont want
the public NIC to
>advertise its DNS info on my private DNS zone cause then
50% of the time
>clients query the zone file, they will get this public
IP, and its not a
>fast connection. I have unchecked the "Register this
connections address's
>in DNS" in Advanced TCP/IP Settings, but it still seems
to be updating the
>zone file. Is there a registry entry that I need to
modify?
>
>Michael
>
>
>.
>

Yea thats what i'm curious about. I know what the problem is...its just
fixing it is the issue. The SBS server is registering the public NIC in the
local DNS zone when I dont want it too. I only want it in the public zone
file. But this is a Windows 2003 issue, not Win2k.

"James Reather" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Jan wrote:
> > "Michael Sainz" <mike@twofatfrogs(remove).com> wrote in message
> > news:%(E-Mail Removed)...
> >> I have a SBS2k3 box that is multihomed. One NIC is for the public
> >> internet connection while the other is private side. I dont want the
> >> public NIC to advertise its DNS info on my private DNS zone cause
> >> then 50% of the time clients query the zone file, they will get this
> >> public IP, and its not a fast connection. I have unchecked the
> >> "Register this connections address's in DNS" in Advanced TCP/IP
> >> Settings, but it still seems to be updating the zone file. Is there
> >> a registry entry that I need to modify?
> >
>
> > KB292822
>
>
> Does that KB actually apply to Windows Server 2003? For Windows 2003, it
> says the issue was fixed in SP3.
>
> James Reather
>
>

There is a possibility that 292822 is still an issue in sbs 2k3 :-(.

I'm checking on it.

--
Les Connor [SBS MVP]
-------------------------------------
SBS Rocks !



"James Reather" <(E-Mail Removed)> wrote in message
news:#(E-Mail Removed)...
> Jan wrote:
> > "Michael Sainz" <mike@twofatfrogs(remove).com> wrote in message
> > news:%(E-Mail Removed)...
> >> I have a SBS2k3 box that is multihomed. One NIC is for the public
> >> internet connection while the other is private side. I dont want the
> >> public NIC to advertise its DNS info on my private DNS zone cause
> >> then 50% of the time clients query the zone file, they will get this
> >> public IP, and its not a fast connection. I have unchecked the
> >> "Register this connections address's in DNS" in Advanced TCP/IP
> >> Settings, but it still seems to be updating the zone file. Is there
> >> a registry entry that I need to modify?
> >
>
> > KB292822
>
>
> Does that KB actually apply to Windows Server 2003? For Windows 2003, it
> says the issue was fixed in SP3.
>
> James Reather
>
>

If you have multiple interfaces you are going to have problems with DNS
and/or WINS.

For WINS, make sure only one interface is active in Netbios over TCP/IP.
For NICs, just disable Netbios over TCP/IP. For RRAS interfaces, you need to
make registry changes to prevent this (as outlined in KB 292822). Make sure
you clean out any old records from the WINS database.

For DNS running DDNS you get similar problems. Just setting DNS to only
listen on the private NIC solves most problems. There are several KB
articles (including 292822) which discuss this problem. It is certainly
still a problem for any DC (especially the first/only DC in a forest) in
W2k3.

"Michael Sainz" <mike@twofatfrogs(remove).com> wrote in message
news:(E-Mail Removed)...
> Yea thats what i'm curious about. I know what the problem is...its just
> fixing it is the issue. The SBS server is registering the public NIC in
the
> local DNS zone when I dont want it too. I only want it in the public zone
> file. But this is a Windows 2003 issue, not Win2k.
>
> "James Reather" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
> > Jan wrote:
> > > "Michael Sainz" <mike@twofatfrogs(remove).com> wrote in message
> > > news:%(E-Mail Removed)...
> > >> I have a SBS2k3 box that is multihomed. One NIC is for the public
> > >> internet connection while the other is private side. I dont want the
> > >> public NIC to advertise its DNS info on my private DNS zone cause
> > >> then 50% of the time clients query the zone file, they will get this
> > >> public IP, and its not a fast connection. I have unchecked the
> > >> "Register this connections address's in DNS" in Advanced TCP/IP
> > >> Settings, but it still seems to be updating the zone file. Is there
> > >> a registry entry that I need to modify?
> > >
> >
> > > KB292822
> >
> >
> > Does that KB actually apply to Windows Server 2003? For Windows 2003,
it
> > says the issue was fixed in SP3.
> >
> > James Reather
> >
> >
>
>

I pointed to 292822 as it has good references to registry keys one needs to
adjust to stop external interface being published in DNS. Same keys for
sbs2000 and 2003. (rasppp.dll file was included in w2k sp3 and there is no
need to replace dll in w2k3).

--
Jan Wakulicz
www.micropol.com.au


"Michael Sainz" <mike@twofatfrogs(remove).com> wrote in message
news:(E-Mail Removed)...
> Yea thats what i'm curious about. I know what the problem is...its just
> fixing it is the issue. The SBS server is registering the public NIC in
the
> local DNS zone when I dont want it too. I only want it in the public zone
> file. But this is a Windows 2003 issue, not Win2k.
>
> "James Reather" <(E-Mail Removed)> wrote in message
> news:%(E-Mail Removed)...
> > Jan wrote:
> > > "Michael Sainz" <mike@twofatfrogs(remove).com> wrote in message
> > > news:%(E-Mail Removed)...
> > >> I have a SBS2k3 box that is multihomed. One NIC is for the public
> > >> internet connection while the other is private side. I dont want the
> > >> public NIC to advertise its DNS info on my private DNS zone cause
> > >> then 50% of the time clients query the zone file, they will get this
> > >> public IP, and its not a fast connection. I have unchecked the
> > >> "Register this connections address's in DNS" in Advanced TCP/IP
> > >> Settings, but it still seems to be updating the zone file. Is there
> > >> a registry entry that I need to modify?
> > >
> >
> > > KB292822
> >
> >
> > Does that KB actually apply to Windows Server 2003? For Windows 2003,
it
> > says the issue was fixed in SP3.
> >
> > James Reather
> >
> >
>
>