Discussion Locked

Questions regarding registering a domain

0 helpful
15 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a Windows 2003 AD sever in which the domain was named domainname.local. I would like to add exchange server to this to get email from the outside world. I am confused as to how this might happen for a couple of reason, 1) the domainname.local's corresponding domainname.com is already registered to someone else, so I will have to register a domain name that doesn't match what is in AD and 2)How will exchange get emails from the outside world if it is part of domainname.local as opposed to a .com domain? Any thoughts/ideas would be great.

Thanks
Paul

15 replies

by cg it

the DNS MX record for public domain name.com/net/org/info/ etc maps your public IP address to that name. Your firewall will have to allow port 25 [SMTP] traffic through. The internal DNS server MX record says host [machine hosting exchange is ip [private ip address]. In exchange management/connectors/SMTP connector properties/address space is where you put your address space with a metric routing weight. you'll see a connector scope that you specify a routing group or for the entire organization. On the SMTP Connector General properties page you have the choice of using DNS to route to the SMTP virtual Server on exchange.

by ccthompson

I would rename the domain to your desired name in Active Directory, after which: Go to www.register.com and register your domain there. If the name you want is already taken, what about instead of domainname.com, you go with domainname.net, or an abbreviation for your company?

Then install exchange. Make sure you have your "MX" records pointed to your outside IP address and you have your router/firewall setup to allow SMTP(port 25) to pass to the correct server.

Hope this helps!

by maru3445

Do I only need to setup the smtp connector because the domain names are different? Why would someone use domain.local as opposed to internal.domain.com?

by curlergirl

Ideally, you would want to change your AD domain name to match your public domain name, but changing your AD domain name, once it has been configured, is impossible without completely wiping out your entire domain and starting over, so you really don't want to do that. Although it is not that common, it is possible to have Exchange use email addresses that do not match your local domain name. The only thing you have to be sure about is that your authoritative DNS server for your domain (wherever that is - probably at your ISP) has both an A (host) and an MX record in your zone that points to the correct IP address and name for your email server. Then, on your router or firewall, you have to set up port forwarding for the SMTP port (port 25) to forward all incoming packets to the correct local server.

In Exchange, you then use the Recipient Policies to configure the default naming convention for the email addresses.

Example: let's say your internal domain name is domainname.local, and your public domain name is company.com; your router IP address is 5.5.5.5 (remember - this is just for arguments sake ;-)); you want your public email server name to be mail.company.com; and your internal Exchange server's name is Exchange.domainname.local with an IP address of 10.0.0.1. Here's how you would do this:

1. On the authoritative server for your domain, create (or have your ISP create) a host (A) record and an MX record for mail.company.com at 5.5.5.5 (your router's public IP).

2. In your Exchange recipient policy, set up the SMTP address to use (mailnickname)@company.com for all of your users.

3. On your router, forward all incoming traffic for port 25 to 10.0.0.1 (the internal address of the Exchange.domainname.local server).

(continued below)

by curlergirl

Your internal Exchange.domainname.local server will be listening on port 25 (SMTP) and will recognize incoming email addressed to any of its local email addresses, which are configured to be mailnickname@company.com. Your router is configured to forward all incoming SMTP traffic to 10.0.0.1, which is the Exchange.domainname.local server that is listening for the SMTP traffic. And your ISP is configured to resolve all public email for your email server, which is using a public alias of mail.company.com, to 5.5.5.5.

There's no reason at all that this shouldn't work.

Hope this helps!

by curlergirl

BTW, the article referred to by ccthompson is for NT4.0 and will NOT work with Win2K or Win2K3 because of active directory. I have heard that there is a way to rename a domain in AD, but I've not heard of anyone who has done it successfully.

by cg it

I disagree with synergy's suggestion to renaming your internal domain to a public extension.

nowadays, for security configuration, supposed experts suggests that you name your private domain with an extension other than those publically available and even not use the .local [because everyone knows that one]. ICANN has the authority over the roots such as .com .net etc. The .com IP to names can be resolved by public name servers which may or may not provide a hole into your private network if said private network uses the public DNS name [not to mention the fowarder issue in DNS which using an extenstion other than whats publically availble resolves]. A private network is only private in that it uses non routable ip addresses [which NAT overcomes] and a firewall [closed door]. If you did not have some form of a firewall [and use private IP addressing] your private network would only be a segment of your ISPs network [and in reality your public IP address is a host address on a segment]

by cg it

other than that Synergy is right on, on configuring exchange to work with both a private and public DNS name.

by cg it

I didn't quite finish the last paragraph. your public ip address assigned to you from your ISP is really your host address on their network. the only thing that seperates you from the rest of the internet world is A: a firewall and B: private IP addressing. DNS .local or .whatever extension is not resolvable on the internet by internet name servers or authoritative name server [other than those authoritative name server on your lan ]. In theory, this is supposed to be a type of security feature.

This discussion is closed to new replies.