Forum Discussion

Copper Contributor

Aug 16, 2018

Windows 2012 r2 with multiple NICs, block specific DNS queries sending out from particular nic.

Hello, I have an Application server running on windows 2012 r2 with multiple NICs. Each NIC has its own primary & secondary DNS servers assigned to the interface. But from one nic I see a lot of unw...

DNS

Rahul Goud Maragani

Copper Contributor

Aug 17, 2018

Hi Dave,
Thanks for your response.
The purpose from NIC which is connected closed network keep sending standard DNS queries (i.e., Google & windows update queries).

Basically, just want to know if there is any way stop sending these queries.

Regards,
Rahul

Dave Patrick

MVP

Aug 17, 2018

The simplest method would be to add entries into your \windows\system32\drivers\etc\hosts file, something like;

127.0.0.1 www.bad-web-site.example.com
127.0.0.1 www.another-site.example.net

Rahul Goud Maragani
Copper Contributor
Aug 17, 2018
Thanks for quick response.

Added the entries into the host file, but no luck. I could still see DNS queries sending out the NIC
- Dave Patrick
  MVP
  Aug 17, 2018
  The hosts file method was to block a local user from browser access to listed sites. You may be able to discover the source process using message analyzer then block the process inbound or outbound traffic at firewall.
  
  https://docs.microsoft.com/en-us/message-analyzer/microsoft-message-analyzer-operating-guide