LeetPirate Posted December 19, 2009 Share Posted December 19, 2009 My gift to you for this holiday season is this tweak.:wub:Leet DNS Cache Tweak for Windows.For those of you who prefer not to completely disable the DNS Client service in Windows, you can use this guide to tweak the service to work in a more useful manner.Similar tweaks are posted all over the net but those guys have no idea why they chose the values they set; some of them didn't make sense so I adjusted them to my own settings which I believe to be more useful and practical. Also I consolidated a few other settings that others left out in their guides. I will provide a brief explanation of what the parameters do but you need to search the internet if you want to know more about them.Open Notepad or any text editor and paste the following code into a new file. REGEDIT4[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters]"QueryIpMatching"=dword:00000001"NegativeCacheTime"=dword:00000000"NegativeSOACacheTime"=dword:00000000"CacheHashTableBucketSize"=dword:00000001"CacheHashTableSize"=dword:00000180"MaxCacheEntryTtlLimit"=dword:00000e10"MaxSOACacheEntryTtlLimit"=dword:0000012c[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters]"QueryIpMatching"=dword:00000001Save the file, call it DNSCache.reg or anything.reg.Be sure you have Administrator privileges, right click the file and select "Merge", click yes to confirm the merge. You could also double click the file instead of right clicking to select merge, same result.Reboot for the changes to take effect.Brief Explanation of Parameters:Sources: http://itsyourip.net...winregistry.php, http://www.thinkdigit.com/forum/showpost.php?p=307914&postcount=4 .QueryIpMatching - Prevents DNS Cache poisoning by preventing the DNS resolver from accepting responses from non-queried DNS servers. May not be related to Win7 but no confirmation from Microsoft so better safe than sorry. Does no harm by adding this key anyway to be on the safe side.NegativeCacheTime - This is similar to MaxCacheEntryTtlLimit with the exception that this defines the time a Negative answer for a domain or host is held. Once the time expires, this negative DNS Cache will cleared.NegativeSOACacheTime - This is similar to MaxSOACacheEntryTtlLimit with the exception that this defines the time a Negative answer for a domain or host is held. Once the time expires, this negative DNS Cache for the SOA record will cleared.CacheHashTableBucketSize - Specifies the number of columns that the Hash table can contain in the DNS Cache.CacheHashTableSize - Specifies the number of rows that the Hash table can contain in the DNS Cache.MaxCacheEntryTtlLimit - The value set to this entry indicates how long the DNS Cache can hold the DNS records for a domain or host. Normally, the DNS responses from the DNS server will have the Time To Live (Time it can be held in DNS Cache) value for the DNS Record. However, if the TTL is more than that set for MaxCacheEntryTtlLimit then that value (from the DNS response) is ignored and will be cleared of the cache once the time defined by MaxCacheEntryTtlLimit expires.The default value is 86400 seconds (1 Day).MaxSOACacheEntryTtlLimit - This is exactly the same as that of MaxCacheEntryTtlLimit with the exception that it applies for the SOA records of a domain and not for the other DNS records. This time overrides the Ttl defined for the SOA Record in the DNS Response which is cached. If the TTL for the SOA record is more than that defined for this entry then TTL from the DNS Response will be ignored and will be cleared of the cache when the MaxSOACacheEntryTtlLimit time expires.The default value is 300 seconds (5 Mins). Link to comment Share on other sites More sharing options...
Administrator DKT27 Posted December 19, 2009 Administrator Share Posted December 19, 2009 Wow. Seems really good. I tried it just now. :) Link to comment Share on other sites More sharing options...
Patrick Posted December 19, 2009 Share Posted December 19, 2009 Am I doing something wrong? Link to comment Share on other sites More sharing options...
HX1 Posted December 19, 2009 Share Posted December 19, 2009 Use regular notepad.. save as regular file no spaces in name to be safe.. then double click the saved file after closing the main window.. Link to comment Share on other sites More sharing options...
Administrator DKT27 Posted December 19, 2009 Administrator Share Posted December 19, 2009 Yea use normal notepad. That worked for me. Link to comment Share on other sites More sharing options...
Patrick Posted December 19, 2009 Share Posted December 19, 2009 Use regular notepad.. save as regular file no spaces in name to be safe.. then double click the saved file after closing the main window..Yep, that worked. Thanks! Link to comment Share on other sites More sharing options...
Bizarre™ Posted December 20, 2009 Share Posted December 20, 2009 Let me add MaxNegativeCacheTtl :) Link to comment Share on other sites More sharing options...
LeetPirate Posted December 20, 2009 Author Share Posted December 20, 2009 Let me add MaxNegativeCacheTtl :)I don't think that would be in effect since Negative Cache is disabled but it can be used if NegativeCacheTime is set to a non zero value. Link to comment Share on other sites More sharing options...
KotaXor Posted December 20, 2009 Share Posted December 20, 2009 Nice...good one. Merry Christmas and a Happy New Year Link to comment Share on other sites More sharing options...
Toshiro Posted December 21, 2009 Share Posted December 21, 2009 Nice one leet!Thnx for the present :$ Link to comment Share on other sites More sharing options...
karachidude Posted December 24, 2009 Share Posted December 24, 2009 Just saw this thread,fantastic as always,rep added,though u dont need one 8) Link to comment Share on other sites More sharing options...
Sonar Posted January 3, 2010 Share Posted January 3, 2010 thanks for this :) Link to comment Share on other sites More sharing options...
Marik Posted January 5, 2010 Share Posted January 5, 2010 I've replaced the normal reg line 5.0 with REGEDIT4...this is to ensure complete system compatibility, as reg 5.0 seems to be incompatible with certain OS's/system configurations Link to comment Share on other sites More sharing options...
xxxxxxxxxx Posted March 28, 2010 Share Posted March 28, 2010 thx, great explanation... i use this and i think its better than before... Link to comment Share on other sites More sharing options...
Hottwire Posted March 29, 2010 Share Posted March 29, 2010 Thanks for this :) Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.