1) That'll be ok 2) What are you using the ISA box for?
Typically I prefer (depends on your setup)... Having your DC forward out to your ISP. Having your ISA servers DNS entry as the DC. Rob -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pyron Sent: 17 August 2004 14:56 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] DNS for AD Clients Yes I got it. Thanks! 1 Last question... Since the ISA Server is in the topic. The setup in my mind would be the ff. 1.) On DC's TCP/IP Settings the DNS Server would be the DC's IP not the 127.0.0.1. The secondary would be left blank. 2.) I would setup the DC's DNS Server to forward to the ISA Server's DNS Server so that all internet related dns requests would be forwarded to ISA's DNS server which will also forward to my ISP's DNS server. All correct? Do we have some considerations to make? At 09:40 PM 8/17/2004, you wrote: >You are correct in point 1, but I would use the server's own IP address >instead of 127.0.0.1 in point 2. > >When a client PC makes a DNS request, it sends that request to its >primary DNS server. If the primary DNS server is not available, the PC >will send the request to its secondary DNS server. The DNS server will >look in its own table for the resolution requested. If that resolution >is not found, the DNS server forwards the request to the next up-level >DNS server. That next up-level DNS server will be your ISP's DNS server >IF you configured your DNS server to forward to the ISP's DNS server. >If you did not configure your DNS server to forward to your ISP's DNS >server, your DNS server will use a built-in list of up-level DNS servers >to forward the request. > >Your DNS server can reside on your DC or on an ISA server (or on a >member server). The DNS service is an add-on service, so it doesn't >matter what other services are running on the hardware (performance >issues being ignored for this statement). > >If you want a better understanding of how your DNS server works, check >out the back issues of Mark Minasi's newsletter at >http://www.minasi.com. Mark gives great information about DNS and how >to set it up to work in different environments. > >Ken Adams > > >-----Original Message----- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Pyron >Sent: Tuesday, August 17, 2004 9:26 AM >To: [EMAIL PROTECTED] >Subject: RE: [ActiveDir] DNS for AD Clients > > >So does this mean the following: >1.) I will point my DC's gateway to the router. >2.) On the TCP/IP of my DC's NIC I will only put 127.0.0.1 on the DNS >Server and leave the 2nd one blank. > >Presuming this is correct, I just have a curious question. >Will the DC be intelligent enough to forward the internet DNS request to > >the up-level DNS Servers (My ISP's DNS server)? > >Here's my 2nd alternative. > >I setup an ISA Server with a DNS Server as my router/gateway. >Now that all of my client computers gateway and dns point to the ISA >Server. >How can the ISA Server forward DC related DNS queries by client >computers >to the DC itself? List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ ======================================================================= Scanned for virus infection by Messagelabs ======================================================================= List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
