Windows Server 2012 R2 KB3185279 & KB3185331 seem to break Google tip to block Youtube with DNS

In enterprise Google offered a tip to block youtube with the DNS;

10-21-2016 4-05-08 PM.png

Some users posted that nslookup started not working after KB3185331

If we dig in the KB’s text, we find that itselft that KB include nothing that can touch the DNS server, but digging farther show that;

10-21-2016 4-11-09 PM.png

The update 3185279 include that fix :

Addressed issue that causes Wildcard CNAME queries with Domain Name System Security Extensions (DNSSEC) enabled to not return Next Secure (NSEC) records.


Be sure to test out correctly if you need to make such tip after the update, as you may need to create a *’s zone to bypass the problem (or remove the update)


This entry was posted in Uncategorized. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s