Hi every body …
I am trying to implement a firewall solution for my W2K based network as follows :
I have a registered DNS domain as :
mydomain.edu.jo
Accordingly , my www server would be named as :
www.mydomain.ahu.edu.jo
and my mail server would be named as :
mymailserver.mydomain.edu.jo
with users having their email accounts as :
myaddress@mydomain.edu.jo
Now , I need to implement a DMZ solution and place my www.mydomain.edu.jo server on that segment .Please note that all servers on the DMZ segment should have Public IP addresses.
Next I want to place my Exchange 2000 server inside the private segment , use server publishing rules on the ISA server to make this server secure from the publicand have a corresponding SMTP server on the DMZ to relay email traffic between the email server and the Internet.
Please note that all machines on the private segment should have private IP addresses.
The question is as follows :
Where should I implement the registered domain , in the DMZ or in the private segment or both ?
It should be on the DMZ to provide services for the public !!!
It should be on the local (private ) segment to provide email access for my local clients , after all my email clients have their addresses as :
myaddress@mydomain.edu.jo
which certainly means that my email server should be a member of the windows 2000 domain called mydomain.edu.jo (to be created)
and my local user account should exist on that domain as well !!!!
Some experts say that you should never use the same domain for the inside and outside world , just how ?
Please try to provide any help.
Thanks & best regards.