Security

Ask something
Discussion Locked

ISA Server , DMZ & DNS

0 helpful
1 reply

by raednashat

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to implement a three-homed ISA server setup.
I have a registered domain as follows:
Domain Name : ahu.edu.jo
Name Server : primary.ahu.edu.jo
IP Address : 193.188.89.2
Just where exactly should I place this DNS
server ( in the DMZ, the ISA server itself or within the protected network )?
I want to be able to provide DNS services for
my AD clients (inside the protected network )
as well as DNS services for the Internet.

My primary domain is ahu.edu.jo so how could I create this domain if I have to keep this server external to my internal domain .In other words what is the relationship between this DNS Server and my Domain controller ?

------------------

1 reply

by sergey kovzik

Of course, better to keep servers in protected zone. This case you'll need to provide access from outside by port 53. There is no much relations between domain and DNS. If you want - you can integrate them. I have them separated - I have DNS served by Bind software. If you have them integrated - you'll be able to do such things as using dynamic IPs with registration in DNS. At all - you can use any domain name inside your network. Microsoft recommends to use domain.local for server structure. Everything depends on your network structure.

Sincerely, Sergey
Brainbench MVP for Win98 Administration

This discussion is closed to new replies.