Co-locating DNS Server and Proxy Server

• Microsoft Proxy Server, version 2.0

SYMPTOMS

After you install Microsoft Domain Name Service (DNS) Server or any third party DNS server on a computer running Microsoft Proxy Server, DNS requests from Internet hosts will fail.

CAUSE

This problem occurs if packet filtering is enabled. The predefined packet filter for DNS lookup in Microsoft Proxy Server is for outbound DNS requests only.

WORKAROUND

In order for internal and external hosts to use a DNS server that is installed on a Microsoft Proxy Server 2.0 computer with packet filtering enabled, you need to create a packet filter for incoming requests. To do this, perform the following steps:

1. Open Internet Service Manager and double click the Winsock Proxy Server to display its properties.

2. Click the Security button to display the Security Properties dialog box.

3. Click the Add button to add a new filter.

4. From the Packet Filter Properties dialog box, choose the Radio button labeled "custom."

5. Set the Protocol ID to "UDP."

6. Set Direction to "Both" (this will allow both incoming and outgoing requests).

7. Set Local Port to "fixed port [ASCII 148]” and specify port 53.

8. Set Remote Port to "Any."

9. Set Local Host to "Default Proxy external address."

10. Set Remote Host to allow "Any host."

11. Click OK to return to the Security dialog box.

12. Click OK again to return to the Properties for the Winsock Proxy

A dialog will display informing you that the Proxy services will need to be restarted for the changes to take effect. Click OK to confirm. After the services have restarted you can click OK to close the Winsock Proxy Service Properties dialog box.

STATUS

Microsoft has confirmed this to be a problem in Microsoft Proxy Server version 2.0. We are researching this problem and will post new information here in the Microsoft Knowledge Base as it becomes available.

Version           : WINNT:2.0
Platform          : winnt
Issue type        : kbbug
Solution Type     : kbpending kbworkaround