In this article

The DNS Query Log or Reporting data can show a dot (.) in the FQDN field instead of a domain name. A dot in the FQDN field is a query for the DNS root. These queries can come from DNS servers that use Root Hints, a list of root server addresses a DNS server uses to resolve queries on its own. Because DNSFilter resolves DNS traffic on the network's behalf, Root Hints are not needed.

Disable Root Hints

Root Hints is disabled differently on Windows Server DNS and BIND.

Windows Server DNS

On the Forwarders tab, clear Use root hints if no forwarders are available. Other methods are available; for the environment's configuration, follow Microsoft's documentation to configure Root Hints.

BIND

In BIND, disable Root Hints by setting forward only mode with the DNSFilter Anycast IPs as forwarders:

options {
    forward only;
    forwarders {
        103.247.36.36;
        103.247.37.37;
    };
};

Related content

• Configure DNS Forwarding on a Network
• DNS Query Log dashboard navigation