DNS Server Routes Queries to Root Name Servers in Addition to Forwarder

Article translations Article translations
Article ID: 303811 - View products that this article applies to.
This article was previously published under Q303811
This article has been archived. It is offered "as is" and will no longer be updated.
Expand all | Collapse all


If a primary Intranet DNS server is configured to forward queries, it cannot resolve to the Internet service provider's (ISP) DNS server. A network capture may show the DNS server routing queries that it cannot resolve directly to the Internet instead of routing them only to the Forwarder.


In a standard DNS forwarder configuration, queries to the primary DNS server are handled in the following way:
  • When the primary Intranet DNS server receives a query that it cannot resolve, it routes the query to the Forwarder.
  • If the primary DNS server does not receive a response in a timely fashion from the Forwarder, it then attempts to route the query to the Internet Root Domain Name servers.
The difference between the queries is that the queries to the Forwarder are recursive and the primary DNS server queries are not.


To prevent Root Hint Servers from being queried, either configure the primary DNS server to be a slave forwarder (disable recursion) or delete the Root Name server entries.


This behavior is by design.

More information

For additional information, please reference RFC's 2136 and 2870.


Article ID: 303811 - Last Review: November 2, 2013 - Revision: 2.0
Applies to
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows NT Server 4.0 Standard Edition
kbnosurvey kbarchive kbenv kbprb KB303811

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com