Server Fault
Server Fault

Questions tagged [llmnr]

Link-Local Multicast Name Resolution (LLMNR) is an obsolete, insecure multicast name resolution protocol. Enabling and using LLMNR is a critical security risk. The Cybersecurity and Infrastructure Security Agency and Microsoft recommend disabling and not using LLMNR or NetBIOS. https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-278a

8 questions
26
votes
5 answers

Why can Windows machines resolve local names when Linux can't?

I have a small network with Windows and Linux machines connected to a D-Link DIR-825 router. The Windows machines on the network can reach all other machines by name while the Linux machines only can reach other machines by IP-address. I can see…
Per Salmi
  • 361
8
votes
2 answers

How do I perform a LLMNR query?

I wish to perform a LLMNR query explicitly. My current environment includes DNS servers so the ping (ping -a specifically) is doing DNS queries to resolve the name. I can disable my DNS in my network configuration, but that isn't an ideal…
DarkSheep
  • 1,056
5
votes
1 answer

LLMNR Disabling possible issues?

For security reasons my company needs to disable LLMNR and I just want to find out if anyone's had issues with this? I understand that its just one step above DNS (similar function) that is used primarily to resolve names to older machines (windows…
LbakerIT
  • 67
4
votes
3 answers

How to find out how DNS is resolved on client computer?

On a windows 7 client, when I ping a LAN host MYSTERY, it gives me the correct IP. However, when I do nslookup MYSTERY, it says non-existent domain. I checked both the DNS listed in ipconfig and find that the hostname MYSTERY is indeed not listed.…
Jake
  • 1,192
2
votes
2 answers

Verifying that LLMNR is disabled - GPO

I am attempting to disable LLMNR on all of our endpoints. I found an article describing the process here. Essentially the process goes like - Create GPO -> Computer Configuration -> Administrative Templates -> Network -> DNS Client Enable Turn Off…
FRALEWHALE
  • 98
2
votes
1 answer

Local Link Multicast Name Resolution replaces NetBIOS, yet textbook says otherwise

I am studying from Configuring Windows Server 2008 Network Infrastructure (our environment still has significant Windows 2008 R2 servers), and one question asks You are working on a Windows Server 2008 R2 computer named WS08A. You cannot connect…
Glowie
  • 169
0
votes
0 answers

windows use llmnr only for local domain

I config my local dns server to resolve a local domain (for example wpad) to 10.0.0.2. I can ping wpad and get 10.0.0.2 under linux. But under win 7, I ping wpad and get "ping request cannot find host", while nslookup wpad and get the right…
iodragon
  • 101
0
votes
1 answer

Is LLMNR used when a local hostname is not found via DNS?

When a Windows 10 computer searches for a network resource on a local network on which a DNS server exists, if the DNS server says "can't find it" (for example due to a typo), does the computer automatically fall back to LLMNR (assuming that no GPO…
itittruee
  • 3