I have a win2k server(only one in my network). It is behind a linux ipchains firewall, which is the win2k machine’s gateway out to the internet. I have set up my ISP’s DNS servers(primary and secondary) in the ‘Forwarders’ tab under the ‘Properties’ of the name of my server in DNS. I don’t have my ISP’s DNS servers listed anywhere else on windows 2000(specifically under TCP/IP) settings.
I can’t seem to figure out why the log my firewall produces(on linux) keeps filling up with rejected requests to send packets to what seems like other DNS servers my ISP has. It seems like win2000 is basically trying lots of different addresses, all out port 53(DNS port), in hopes of getting to another DNS server. I guess I don’t really understand the role DNS plays in active directory. My only guess is that maybe my ISP’s DNS servers are busy and directing them to go to other DNS servers?? I really don’t want to just start letting things through my firewall I don’t fully understand. I don’t doubt I have something about active directory or DNS on the win2k machine set up wrong…just can’t figure out what. I am kind of lost when it comes to forward and reverse lookup zones. Any help you can provide is appreciated!