.png?width=100&auto=webp&quality=80&disable=upscale "Picture of John Savill")
.png?width=400&auto=webp&quality=80&disable=upscale "John Savill")
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
How can I ensure that the DNS resolver uses only results from queried DNS servers?
John Savill
October 22, 2002
1 Min Read
A. By default, if a client requests name resolution, the client will accept any response with the correct query ID, regardless of where the response is from. This behavior could lead to security problems if a rogue process that deliberately returns incorrect information exists on a system. To force the DNS resolver to match the source IP address of the response with the DNS servers that the DNS resolver queried, perform the following steps:
Start a registry editor (e.g., regedit.exe) on each client machine.
Navigate to the HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesDnscacheParameters registry subkey.
From the Edit menu, select New, DWORD Value.
Enter the name QueryIpMatching, then press Enter.
Double-click the new value, set it to 1, then click OK.
Close the registry editor.
Reboot the machine for the change to take effect.
About the Author
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
