\n

\u6548\u80fd\u63d0\u793a\uff1a<\/strong>\u5728\u9632\u706b\u7246\u898f\u5247\u4e2d\u4f7f\u7528DNS\u540d\u7a31\u6642\uff0c\u5efa\u8b70\u5be6\u65bdDNS\u5feb\u53d6\u4ee5\u6e1b\u5c11\u67e5\u8a62\u958b\u92b7\u3002\u5c0d\u65bc\u5927\u591a\u6578\u60c5\u5883\uff0c\u5efa\u8b70\u7684\u5feb\u53d6\u6301\u7e8c\u6642\u9593\u70ba3600\u79d2\u3002<\/p>\n<\/div>\n

\u9762\u5411\u9ad8\u6548\u80fd\u4f3a\u670d\u5668\u7684\u9032\u968eDNS\u914d\u7f6e<\/strong><\/h2>\n

\u70ba\u4e86\u5728\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u74b0\u5883\u4e2d\u7372\u5f97\u6700\u4f73\u6548\u80fd\uff0c\u5be6\u65bd\u9032\u968eDNS\u914d\u7f6e\u81f3\u95dc\u91cd\u8981\u3002\u4ee5\u4e0b\u662f\u7528\u65bc\u63d0\u5347DNS\u89e3\u6790\u901f\u5ea6\u7684\u767b\u9304\u6a94\u4fee\u6539\uff1a<\/p>\n

\r\nWindows Registry Editor Version 5.00\r\n\r\n[HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\DNS\\Parameters]\r\n\"MaxCacheTTL\"=dword:00015180\r\n\"MaxNegativeCacheTTL\"=dword:00000384\r\n\"NetFailureCacheTime\"=dword:00000000\r\n\"UpdateOptions\"=dword:00000001\r\n<\/code><\/pre>\n
\u898f\u5247\u9a57\u8b49\u548c\u6e2c\u8a66\u7684\u5be6\u65bd<\/strong><\/h2>\n
\u4f7f\u7528\u6b64PowerShell\u9a57\u8b49\u6307\u4ee4\u78bc\u9a57\u8b49\u60a8\u7684DNS\u89e3\u6790\u914d\u7f6e\uff1a<\/p>\n
\r\nfunction Test-FirewallDNSResolution {\r\n    param (\r\n        [string]$DomainName,\r\n        [int]$Timeout = 10\r\n    )\r\n    \r\n    $result = @{\r\n        Success = $false\r\n        ResponseTime = 0\r\n    }\r\n    \r\n    $timer = [System.Diagnostics.Stopwatch]::StartNew()\r\n    \r\n    try {\r\n        $dnsResult = Resolve-DnsName -Name $DomainName -ErrorAction Stop\r\n        $connection = Test-NetConnection -ComputerName $dnsResult.IPAddress -Port 80 -WarningAction SilentlyContinue\r\n        \r\n        if ($connection.TcpTestSucceeded) {\r\n            $result.Success = $true\r\n        }\r\n    }\r\n    catch {\r\n        Write-Error \"DNS\u89e3\u6790\u5931\u6557: $_\"\r\n    }\r\n    \r\n    $timer.Stop()\r\n    $result.ResponseTime = $timer.Elapsed.TotalMilliseconds\r\n    \r\n    return $result\r\n}\r\n\r\n# \u4f7f\u7528\u793a\u4f8b\r\n$testResult = Test-FirewallDNSResolution -DomainName \"yourdomain.com\"\r\nWrite-Host \"\u6e2c\u8a66\u7d50\u679c: $($testResult | ConvertTo-Json)\"\r\n<\/code><\/pre>\n
\u8de8\u5883\u6d41\u91cf\u6700\u4f73\u5316<\/strong><\/h2>\n
\u9999\u6e2f\u4f3a\u670d\u5668\u7d93\u5e38\u9700\u8981\u8655\u7406\u4f86\u81ea\u591a\u500b\u5730\u5340\u7684\u6d41\u91cf\u3002\u5be6\u65bd\u4ee5\u4e0b\u6700\u4f73\u5316\u4ee5\u63d0\u5347\u8de8\u5883\u6548\u80fd\uff1a<\/p>\n
\n
\u914d\u7f6e\u591a\u500bDNS\u8f49\u767c\u5668\u4ee5\u5be6\u73fe\u5197\u9918<\/li>\n
\u5be6\u65bd\u57fa\u65bcDNS\u7684\u8ca0\u8f09\u5e73\u8861<\/li>\n
\u8a2d\u7f6e\u57fa\u65bc\u5730\u7406\u4f4d\u7f6e\u7684DNS\u89e3\u6790<\/li>\n<\/ul>\n
\n
\u5b89\u5168\u63d0\u793a\uff1a<\/strong>\u8655\u7406\u8de8\u5883\u6d41\u91cf\u6642\uff0c\u9700\u8981\u5be6\u65bd\u984d\u5916\u7684\u9a57\u8b49\u5c64\uff1a<\/p>\n<\/div>\n
\r\n# \u65b0\u589e\u57fa\u65bc\u5730\u7406\u4f4d\u7f6e\u7684DNS\u89e3\u6790\r\nAdd-DnsServerClientSubnet -Name \"APAC\" -IPv4Subnet \"203.0.113.0\/24\"\r\nAdd-DnsServerZoneScope -ZoneName \"yourdomain.com\" -Name \"APAC-Scope\"\r\nAdd-DnsServerResourceRecord -ZoneName \"yourdomain.com\" -Name \"www\" -A -IPv4Address \"203.0.113.100\" -ZoneScope \"APAC-Scope\"\r\n<\/code><\/pre>\n
\u5e38\u898b\u554f\u984c\u6545\u969c\u6392\u9664<\/strong><\/h2>\n
\u5728\u7ba1\u7406Windows\u9632\u706b\u7246\u7684DNS\u529f\u80fd\u6642\uff0c\u7279\u5225\u662f\u5728\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u74b0\u5883\u4e2d\uff0c\u53ef\u80fd\u6703\u9047\u5230\u4ee5\u4e0b\u554f\u984c\uff1a<\/p>\n
\n
\u8a3a\u65b7\u5de5\u5177\uff1a<\/strong>\u4f7f\u7528\u6b64PowerShell\u6307\u4ee4\u78bc\u9032\u884c\u81ea\u52d5\u6545\u969c\u6392\u9664\uff1a<\/p>\n<\/div>\n
\r\nfunction Diagnose-FirewallDNSConfig {\r\n    param (\r\n        [string]$RuleName = \"DNS-\u5141\u8a31\"\r\n    )\r\n    \r\n    $diagnostics = @{\r\n        DNSService = $false\r\n        FirewallService = $false\r\n        RuleExists = $false\r\n        DNSResolution = $false\r\n    }\r\n    \r\n    # \u6aa2\u67e5DNS\u5ba2\u6236\u7aef\u670d\u52d9\r\n    $dnsService = Get-Service -Name \"Dnscache\"\r\n    $diagnostics.DNSService = $dnsService.Status -eq \"Running\"\r\n    \r\n    # \u6aa2\u67e5\u9632\u706b\u7246\u670d\u52d9\r\n    $fwService = Get-Service -Name \"MpsSvc\"\r\n    $diagnostics.FirewallService = $fwService.Status -eq \"Running\"\r\n    \r\n    # \u9a57\u8b49\u898f\u5247\u5b58\u5728\u6027\r\n    $rule = Get-NetFirewallRule -DisplayName $RuleName -ErrorAction SilentlyContinue\r\n    $diagnostics.RuleExists = $rule -ne $null\r\n    \r\n    return $diagnostics | ConvertTo-Json\r\n}\r\n<\/code><\/pre>\n
\u6548\u80fd\u76e3\u63a7\u8207\u6700\u4f73\u5316<\/strong><\/h2>\n
\u900f\u904e\u4ee5\u4e0b\u95dc\u9375\u6307\u6a19\u76e3\u63a7\u60a8\u7684DNS\u89e3\u6790\u6548\u80fd\uff1a<\/p>\n
\n
DNS\u67e5\u8a62\u56de\u61c9\u6642\u9593<\/li>\n
\u5feb\u53d6\u547d\u4e2d\u7387<\/li>\n
\u89e3\u6790\u5931\u6557\u7387<\/li>\n<\/ul>\n
\r\n# \u6548\u80fd\u76e3\u63a7\u6307\u4ee4\u78bc\r\n$perfCounters = @(\r\n    \"\\DNS\\\u6bcf\u79d2\u7e3d\u67e5\u8a62\u6578\",\r\n    \"\\DNS\\\u6bcf\u79d2\u7e3d\u56de\u61c9\u6578\",\r\n    \"\\DNS\\\u6bcf\u79d2\u905e\u8ff4\u67e5\u8a62\u6578\"\r\n)\r\n\r\nGet-Counter -Counter $perfCounters -SampleInterval 5 -MaxSamples 12\r\n<\/code><\/pre>\n
\u6700\u4f73\u5be6\u8e10\u548c\u5b89\u5168\u6ce8\u610f\u4e8b\u9805<\/strong><\/h2>\n
\u5728Windows\u9632\u706b\u7246\u4e2d\u5be6\u65bd\u4ee5\u4e0b\u5b89\u5168\u63aa\u65bd\uff0c\u4ee5\u78ba\u4fddDNS\u914d\u7f6e\u7684\u7a69\u5065\u6027\uff1a<\/p>\n
\n
\u5b9a\u671f\u7a3d\u6838DNS\u898f\u5247<\/li>\n
\u5be6\u65bdDNSSEC<\/li>\n
\u76e3\u63a7DNS\u67e5\u8a62\u6a21\u5f0f<\/li>\n<\/ul>\n
\u7e3d\u7d50\u548c\u5f8c\u7e8c\u6b65\u9a5f<\/strong><\/h2>\n
\u5728Windows\u9632\u706b\u7246\u4e2d\u6b63\u78ba\u914d\u7f6eDNS\u540d\u7a31\u529f\u80fd\u5c0d\u65bc\u5b89\u5168\u9ad8\u6548\u7684\u4f3a\u670d\u5668\u7ba1\u7406\u81f3\u95dc\u91cd\u8981\u3002\u5c0d\u65bc\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u74b0\u5883\uff0c\u9019\u7a2e\u8a2d\u7f6e\u80fd\u78ba\u4fdd\u53ef\u9760\u7684\u8de8\u5883\u9023\u63a5\uff0c\u540c\u6642\u4fdd\u6301\u5f37\u5927\u7684\u5b89\u5168\u5354\u5b9a\u3002<\/p>\n
\n
\u672a\u4f86\u8003\u616e\uff1a<\/strong>\u6301\u7e8c\u95dc\u6ce8Windows Server\u5b89\u5168\u88dc\u4e01\u548cDNS\u5354\u5b9a\u7684\u767c\u5c55\uff0c\u4ee5\u4fdd\u6301\u6700\u4f73\u6548\u80fd\u548c\u5b89\u5168\u6027\u3002<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
\u7406\u89e3Windows\u9632\u706b\u7246\u4e2d\u7684DNS\u89e3\u6790 Windows\u9632\u706b\u7246\u7684DNS\u540d\u7a31\u89e3\u6790\u529f\u80fd\u5c0d\u65bc\u7ba1\u7406\u9999\u6e2f\u4f3a\u670d\u5668\u79df\u7528\u74b0\u5883\u7684\u4f3a […]<\/p>\n
Read More…<\/a><\/p>\n","protected":false},"author":3,"featured_media":21153,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[61],"tags":[5644,5643,5645,852,247],"class_list":["post-21156","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hong-kong-dedicated-server-tc","tag-whitelist-configuration-tc","tag-windows-firewall-dns-tc","tag-firewall-management-tc","tag-server-security-tc","tag-hong-kong-server-rental-tc"],"acf":[],"yoast_head":"\n