Windows Forum

Ask something
Discussion Locked

DNS Problem

0 helpful
7 replies

by bmcafee

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Environment: Internal network (not public) Win 2000 server running Active Directory, setup as a new domain tree, in a new forest of domain tree, full dns name: hmeps.org, full computer computer name: hmeps5.hmeps.org, domain: hmeps.org, dns suffix: hmeps.org, and Internet Access.

Objects in Direstory services are not reachable. When using nslookup, the default server points to our web host server for our public name hmeps.org. Directory services is not working. How do I correct this problem?

7 replies

by timwalsh

Where is your DNS being hosted, internally or by your ISP? Your symptoms appear to point to an external DNS server.

If it is being hosted by your ISP, that is probably the root of your problem.

For AD to work correctly, it must have access toa DNS server capable of dynamic updates. While the version of BIND used by your ISP probably supports dynamic updates, I would be very surprised if they allow AD records to be added to their DNS tables. The solution woul be for you to host your own internal DNS, point to your ISP's DNS server as a forwarder. Also setup an alias record that points to the web server or your internal clients will not be able to reach your public web page.

Hope this helps.

by greybeard770

Use an internal DNS server (in Active Directory) for your internal addresses and an external DNS server for external addresses. Configure both as the Start Of Authority for the domain but don't allow them to share information. You probably don't want your internal computers (with private addresses) published on the Internet anyway.

by curlergirl

Your default DNS server should be your internal DNS server, not an external one. Then, on your internal DNS server, all you need to do is set up your ISP's DNS servers as forwarders. If your internal server can't resolve a name, it will forward the request to your ISP's external servers. If you need help in how to do this, email me (synergy@synoffsys.com) and I'd be glad to walk you through it. Hope this helps!

This discussion is closed to new replies.