Policiy DNS 2016. DNS giving different replies to different queries for subnet blocked with DNS policy

R

Ram24

Hello Team,



I have configured DNS policies on server 2016 to bock dns name resolution to particular subnet.

It is working fine and we can see the name resolution not working on given subnet.



However whenever I am trying to run command nslookup I am getting response as "Query refused" or "Server failed".

There is no specific pattern for this and its happening randomly for any query.



I would like to know why I am getting two types of responses. I collected following logs:-





1) netmon traces (similar to Wireshark) 2) event logs 3) DNS debug logs 4) procmon.



However I am not getting necessary data after recreating the issue. I don’t see policy name or any other information as why few queries were REFUSED and why rest of them, server FAILED to provide answer.



Please let me know on how to proceed with this .



Thank you!


Continue reading...
 
Back
Top Bottom