\n

\u6027\u80fd\u63d0\u793a\uff1a<\/strong>\u5728\u9632\u706b\u5899\u89c4\u5219\u4e2d\u4f7f\u7528DNS\u540d\u79f0\u65f6\uff0c\u5efa\u8bae\u5b9e\u65bdDNS\u7f13\u5b58\u4ee5\u51cf\u5c11\u67e5\u8be2\u5f00\u9500\u3002\u5bf9\u4e8e\u5927\u591a\u6570\u573a\u666f\uff0c\u5efa\u8bae\u7684\u7f13\u5b58\u6301\u7eed\u65f6\u95f4\u4e3a3600\u79d2\u3002<\/p>\n<\/div>\n

\u9762\u5411\u9ad8\u6027\u80fd\u670d\u52a1\u5668\u7684\u9ad8\u7ea7DNS\u914d\u7f6e<\/strong><\/h2>\n

\u4e3a\u4e86\u5728\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u73af\u5883\u4e2d\u83b7\u5f97\u6700\u4f73\u6027\u80fd\uff0c\u5b9e\u65bd\u9ad8\u7ea7DNS\u914d\u7f6e\u81f3\u5173\u91cd\u8981\u3002\u4ee5\u4e0b\u662f\u7528\u4e8e\u63d0\u5347DNS\u89e3\u6790\u901f\u5ea6\u7684\u6ce8\u518c\u8868\u4fee\u6539\uff1a<\/p>\n

\r\nWindows Registry Editor Version 5.00\r\n\r\n[HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\DNS\\Parameters]\r\n\"MaxCacheTTL\"=dword:00015180\r\n\"MaxNegativeCacheTTL\"=dword:00000384\r\n\"NetFailureCacheTime\"=dword:00000000\r\n\"UpdateOptions\"=dword:00000001\r\n<\/code><\/pre>\n
\u89c4\u5219\u9a8c\u8bc1\u548c\u6d4b\u8bd5\u7684\u5b9e\u65bd<\/strong><\/h2>\n
\u4f7f\u7528\u6b64PowerShell\u9a8c\u8bc1\u811a\u672c\u9a8c\u8bc1\u60a8\u7684DNS\u89e3\u6790\u914d\u7f6e\uff1a<\/p>\n
\r\nfunction Test-FirewallDNSResolution {\r\n    param (\r\n        [string]$DomainName,\r\n        [int]$Timeout = 10\r\n    )\r\n    \r\n    $result = @{\r\n        Success = $false\r\n        ResponseTime = 0\r\n    }\r\n    \r\n    $timer = [System.Diagnostics.Stopwatch]::StartNew()\r\n    \r\n    try {\r\n        $dnsResult = Resolve-DnsName -Name $DomainName -ErrorAction Stop\r\n        $connection = Test-NetConnection -ComputerName $dnsResult.IPAddress -Port 80 -WarningAction SilentlyContinue\r\n        \r\n        if ($connection.TcpTestSucceeded) {\r\n            $result.Success = $true\r\n        }\r\n    }\r\n    catch {\r\n        Write-Error \"DNS\u89e3\u6790\u5931\u8d25: $_\"\r\n    }\r\n    \r\n    $timer.Stop()\r\n    $result.ResponseTime = $timer.Elapsed.TotalMilliseconds\r\n    \r\n    return $result\r\n}\r\n\r\n# \u4f7f\u7528\u793a\u4f8b\r\n$testResult = Test-FirewallDNSResolution -DomainName \"yourdomain.com\"\r\nWrite-Host \"\u6d4b\u8bd5\u7ed3\u679c: $($testResult | ConvertTo-Json)\"\r\n<\/code><\/pre>\n
\u8de8\u5883\u6d41\u91cf\u4f18\u5316<\/strong><\/h2>\n
\u9999\u6e2f\u670d\u52a1\u5668\u7ecf\u5e38\u9700\u8981\u5904\u7406\u6765\u81ea\u591a\u4e2a\u5730\u533a\u7684\u6d41\u91cf\u3002\u5b9e\u65bd\u4ee5\u4e0b\u4f18\u5316\u4ee5\u63d0\u5347\u8de8\u5883\u6027\u80fd\uff1a<\/p>\n
\n
\u914d\u7f6e\u591a\u4e2aDNS\u8f6c\u53d1\u5668\u4ee5\u5b9e\u73b0\u5197\u4f59<\/li>\n
\u5b9e\u65bd\u57fa\u4e8eDNS\u7684\u8d1f\u8f7d\u5747\u8861<\/li>\n
\u8bbe\u7f6e\u57fa\u4e8e\u5730\u7406\u4f4d\u7f6e\u7684DNS\u89e3\u6790<\/li>\n<\/ul>\n
\n
\u5b89\u5168\u63d0\u793a\uff1a<\/strong>\u5904\u7406\u8de8\u5883\u6d41\u91cf\u65f6\uff0c\u9700\u8981\u5b9e\u65bd\u989d\u5916\u7684\u9a8c\u8bc1\u5c42\uff1a<\/p>\n<\/div>\n
\r\n# \u6dfb\u52a0\u57fa\u4e8e\u5730\u7406\u4f4d\u7f6e\u7684DNS\u89e3\u6790\r\nAdd-DnsServerClientSubnet -Name \"APAC\" -IPv4Subnet \"203.0.113.0\/24\"\r\nAdd-DnsServerZoneScope -ZoneName \"yourdomain.com\" -Name \"APAC-Scope\"\r\nAdd-DnsServerResourceRecord -ZoneName \"yourdomain.com\" -Name \"www\" -A -IPv4Address \"203.0.113.100\" -ZoneScope \"APAC-Scope\"\r\n<\/code><\/pre>\n
\u5e38\u89c1\u95ee\u9898\u6545\u969c\u6392\u9664<\/strong><\/h2>\n
\u5728\u7ba1\u7406Windows\u9632\u706b\u5899\u7684DNS\u529f\u80fd\u65f6\uff0c\u7279\u522b\u662f\u5728\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u73af\u5883\u4e2d\uff0c\u53ef\u80fd\u4f1a\u9047\u5230\u4ee5\u4e0b\u95ee\u9898\uff1a<\/p>\n
\n
\u8bca\u65ad\u5de5\u5177\uff1a<\/strong>\u4f7f\u7528\u6b64PowerShell\u811a\u672c\u8fdb\u884c\u81ea\u52a8\u6545\u969c\u6392\u9664\uff1a<\/p>\n<\/div>\n
\r\nfunction Diagnose-FirewallDNSConfig {\r\n    param (\r\n        [string]$RuleName = \"DNS-\u5141\u8bb8\"\r\n    )\r\n    \r\n    $diagnostics = @{\r\n        DNSService = $false\r\n        FirewallService = $false\r\n        RuleExists = $false\r\n        DNSResolution = $false\r\n    }\r\n    \r\n    # \u68c0\u67e5DNS\u5ba2\u6237\u7aef\u670d\u52a1\r\n    $dnsService = Get-Service -Name \"Dnscache\"\r\n    $diagnostics.DNSService = $dnsService.Status -eq \"Running\"\r\n    \r\n    # \u68c0\u67e5\u9632\u706b\u5899\u670d\u52a1\r\n    $fwService = Get-Service -Name \"MpsSvc\"\r\n    $diagnostics.FirewallService = $fwService.Status -eq \"Running\"\r\n    \r\n    # \u9a8c\u8bc1\u89c4\u5219\u5b58\u5728\u6027\r\n    $rule = Get-NetFirewallRule -DisplayName $RuleName -ErrorAction SilentlyContinue\r\n    $diagnostics.RuleExists = $rule -ne $null\r\n    \r\n    return $diagnostics | ConvertTo-Json\r\n}\r\n<\/code><\/pre>\n
\u6027\u80fd\u76d1\u63a7\u4e0e\u4f18\u5316<\/strong><\/h2>\n
\u901a\u8fc7\u4ee5\u4e0b\u5173\u952e\u6307\u6807\u76d1\u63a7\u60a8\u7684DNS\u89e3\u6790\u6027\u80fd\uff1a<\/p>\n
\n
DNS\u67e5\u8be2\u54cd\u5e94\u65f6\u95f4<\/li>\n
\u7f13\u5b58\u547d\u4e2d\u7387<\/li>\n
\u89e3\u6790\u5931\u8d25\u7387<\/li>\n<\/ul>\n
\r\n# \u6027\u80fd\u76d1\u63a7\u811a\u672c\r\n$perfCounters = @(\r\n    \"\\DNS\\\u6bcf\u79d2\u603b\u67e5\u8be2\u6570\",\r\n    \"\\DNS\\\u6bcf\u79d2\u603b\u54cd\u5e94\u6570\",\r\n    \"\\DNS\\\u6bcf\u79d2\u9012\u5f52\u67e5\u8be2\u6570\"\r\n)\r\n\r\nGet-Counter -Counter $perfCounters -SampleInterval 5 -MaxSamples 12\r\n<\/code><\/pre>\n
\u6700\u4f73\u5b9e\u8df5\u548c\u5b89\u5168\u6ce8\u610f\u4e8b\u9879<\/strong><\/h2>\n
\u5728Windows\u9632\u706b\u5899\u4e2d\u5b9e\u65bd\u4ee5\u4e0b\u5b89\u5168\u63aa\u65bd\uff0c\u4ee5\u786e\u4fddDNS\u914d\u7f6e\u7684\u7a33\u5065\u6027\uff1a<\/p>\n
\n
\u5b9a\u671f\u5ba1\u6838DNS\u89c4\u5219<\/li>\n
\u5b9e\u65bdDNSSEC<\/li>\n
\u76d1\u63a7DNS\u67e5\u8be2\u6a21\u5f0f<\/li>\n<\/ul>\n
\u603b\u7ed3\u548c\u540e\u7eed\u6b65\u9aa4<\/strong><\/h2>\n
\u5728Windows\u9632\u706b\u5899\u4e2d\u6b63\u786e\u914d\u7f6eDNS\u540d\u79f0\u529f\u80fd\u5bf9\u4e8e\u5b89\u5168\u9ad8\u6548\u7684\u670d\u52a1\u5668\u7ba1\u7406\u81f3\u5173\u91cd\u8981\u3002\u5bf9\u4e8e\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u73af\u5883\uff0c\u8fd9\u79cd\u8bbe\u7f6e\u80fd\u786e\u4fdd\u53ef\u9760\u7684\u8de8\u5883\u8fde\u63a5\uff0c\u540c\u65f6\u4fdd\u6301\u5f3a\u5927\u7684\u5b89\u5168\u534f\u8bae\u3002<\/p>\n
\n
\u672a\u6765\u8003\u8651\uff1a<\/strong>\u6301\u7eed\u5173\u6ce8Windows Server\u5b89\u5168\u8865\u4e01\u548cDNS\u534f\u8bae\u7684\u53d1\u5c55\uff0c\u4ee5\u4fdd\u6301\u6700\u4f73\u6027\u80fd\u548c\u5b89\u5168\u6027\u3002<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
\u7406\u89e3Windows\u9632\u706b\u5899\u4e2d\u7684DNS\u89e3\u6790 Windows\u9632\u706b\u5899\u7684DNS\u540d\u79f0\u89e3\u6790\u529f\u80fd\u5bf9\u4e8e\u7ba1\u7406\u9999\u6e2f\u670d\u52a1\u5668\u79df\u7528\u73af\u5883\u7684\u670d\u52a1\u5668\u7ba1\u7406\u5458\u6765\u8bf4\u81f3\u5173\u91cd\u8981\u3002\u4e0e\u4f20\u7edf\u7684\u57fa\u4e8eIP\u7684\u89c4\u5219\u4e0d\u540c\uff0cDNS\u89e3\u6790\u80fd\u591f\u5728\u7ef4\u6301\u5b89\u5168\u534f\u8bae\u7684\u540c\u65f6\uff0c\u5b9e\u73b0\u5bf9IP\u53d8\u66f4\u7684\u52a8\u6001\u9002\u5e94\u3002 \u524d\u63d0\u6761\u4ef6\u548c\u7cfb\u7edf\u8981\u6c42 \u5728\u5f00\u59cb\u914d\u7f6e\u4e4b\u524d\uff0c\u8bf7\u786e\u4fdd\u60a8\u7684\u7cfb\u7edf\u6ee1\u8db3\u4ee5\u4e0b\u8981\u6c42\uff1a Windows Server 2016\u6216\u66f4\u9ad8\u7248\u672c \u7ba1\u7406\u5458\u6743\u9650 \u542f\u7528\u9ad8\u7ea7\u5b89\u5168Windows\u9632\u706b\u5899 Active Directory\u57df\u670d\u52a1\uff08\u5982\u679c\u4f7f\u7528\u57df\u73af\u5883\uff09 \u6280\u672f\u8bf4\u660e\uff1a\u9632\u706b\u5899\u89c4\u5219\u4e2d\u7684DNS\u89e3\u6790\u9700\u8981Windows\u9632\u706b\u5899\u670d\u52a1\u7ef4\u62a4\u4e00\u4e2a\u72ec\u7acb\u4e8e\u7cfb\u7edfDNS\u7f13\u5b58\u7684DNS\u7f13\u5b58\u3002\u8fd9\u79cd\u5b9e\u73b0\u65b9\u5f0f\u53ef\u4ee5\u9632\u6b62\u901a\u8fc7DNS\u6b3a\u9a97\u8fdb\u884c\u7684\u6f5c\u5728\u5b89\u5168\u7ed5\u8fc7\u3002 \u901a\u8fc7PowerShell\u542f\u7528DNS\u540d\u79f0\u89e3\u6790 \u5bf9\u4e8e\u6ce8\u91cd\u81ea\u52a8\u5316\u7684\u7ba1\u7406\u5458\uff0c\u8fd9\u662f\u542f\u7528DNS\u89e3\u6790\u7684PowerShell\u811a\u672c\uff1a # \u5728Windows\u9632\u706b\u5899\u4e2d\u542f\u7528DNS\u89e3\u6790 $FirewallRule = New-Object -ComObject HNetCfg.FWRule # \u914d\u7f6e\u89c4\u5219\u5c5e\u6027 $FirewallRule.Name = “\u5141\u8bb8DNS\u89e3\u6790” $FirewallRule.Description = “\u5141\u8bb8\u7279\u5b9a\u57df\u540d\u7684DNS\u540d\u79f0\u89e3\u6790” $FirewallRule.Protocol = 6 # TCP $FirewallRule.RemoteAddresses = “dns.example.com” $FirewallRule.Enabled = $true $FirewallRule.Direction = 1 # \u5165\u7ad9 $FirewallRule.Action = 1 # \u5141\u8bb8 # \u5c06\u89c4\u5219\u6dfb\u52a0\u5230\u9632\u706b\u5899\u7b56\u7565 $FirewallPolicy = New-Object […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":21154,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[62],"tags":[5646,5647,5648,5048,248],"class_list":["post-21157","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hong-kong-dedicated-server-sc","tag-windows-firewall-dns-sc","tag-whitelist-configuration-sc","tag-firewall-management-sc","tag-5048","tag-hong-kong-server-rental-sc"],"acf":[],"yoast_head":"\n