🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: a2000.comp.software.os.windows-nt
Article #13

Re: DNS

#13
From: ExecPC User
Date: Thu, 12 Nov 1998 00:00
79 lines
4149 bytes
I am sure you are using either a firewall app or a proxy server to protect
your intranet from the internet, right?

If not, please post the URL of you web server soI can get you fired in about
5 minutes.

Your intranet SHOULD NOT BE ON A LEGAL ROUTABLE NETWORK. That is sheer
lunacy. Put yor intranet on a private network where it belongs and you are
another step closer to keeping your job. When you use a firewall, like
checkpoint, you tell it how to handle inbound traffic. So...when traffic
goes to your 1 legal IP address (the one your ISP gives you) it will look at
the port on which the request is being made. If the call is to port 80 (web
traffic, go to 192.168.0.56, the intranet webserver), if it is 21 (ftp
traffic, send it to 192.168.0.87, the ftp server) you get the idea. It gets
much more complicated from here. Say you have more than one web server, or
you have multiple Exchange bridgehead servers....it gets more tricky. Now
you are getting into scenarios where you need to have your own DNS that
shares the firewall so you can do load balancing with MX records and
stuff.......

Keep it simple. Use a firewall or an application that supports inbound NAT
or proxying, like checkpoint or MS Proxy 2.0.

But if you do nothing else, get your network off the internet....otherwise
you are asking for BIG TROUBLE!


Good luck,

Todd

PS> what was that URL...


Bill Tucek wrote in message <364A4FA6.A6531C9E@midtel.net>...
>Hello:
>
>    I would consider the implications to running your own DNS, firstly is
this
>something that is provided as a free by your ISP. Secondly are you willing
to
>devote a server and your time to setup and maintain it. Are you aware of
the
>implications if your DNS server goes down,  ex. would the outside world be
able
>to get to your site? If you have a public web site and were unaware that
your
>DNS server was down this could cost you revenue.
>
>    If these are an assigned IP address from your ISP you can have them
setup
>reverse DNS so you can map IP to address as well - at no additional time or
cost
>on your part!
>
>Bill
>
>Morrison wrote:
>
>> Who can give a quick lead how to install DNS in my network.
>> I have a NT4.0-network and installed IIS. I'd like clients to be able to
use
>> names rather than IP-addresses to address local webservers.
>>
>> Further, our LAN is connected to an ISP for Internet (using NAT), so
already
>> DNS is installed on clients where it concerns resolving
Internet-addresses.
>> Obviously, the Intranet is a legal IP-range.
>>
>> How do I get both working ?
>>
>> Any tips books on this also appreciated. I couldn't resolve this using
>> TCP/Ip from the MCSE course.
>>
>> Thanks!
>>
>> Morrison
>
Technical Details
Message-ID: <72g1jn$plk@newsops.execpc.com>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <71ikdt$1ck$1@newton.a2000.nl> <364A4FA6.A6531C9E@midtel.net>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fe2c9,3038099bdb9d7263
X-Google-Attributes: gidfe2c9,public
X-Google-Thread: fb9cd,3038099bdb9d7263
X-Google-Attributes: gidfb9cd,public
X-Google-Thread: 13baf1,3038099bdb9d7263
X-Google-Attributes: gid13baf1,public
X-Google-Thread: 1151f2,3038099bdb9d7263
X-Google-Attributes: gid1151f2,public
X-Google-Thread: f782f,f4b3ade3ba403e21
X-Google-Attributes: gidf782f,public
X-Google-Thread: f977f,3038099bdb9d7263
X-Google-Attributes: gidf977f,public
X-Google-Thread: f560d,3038099bdb9d7263
X-Google-Attributes: gidf560d,public
X-Google-Thread: fa335,3038099bdb9d7263
X-Google-Attributes: gidfa335,public
From: "ExecPC User" <End.User@No.Spam.com>
Subject: Re: DNS
Date: 1998/11/12
Message-ID: <72g1jn$plk@newsops.execpc.com>
X-Deja-AN: 411289390
References: <71ikdt$1ck$1@newton.a2000.nl> <364A4FA6.A6531C9E@midtel.net>
X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4
X-Complaints-To: abuse@execpc.com
X-Trace: daily-planet.newsops.execpc.com 910920119 26292 (None) 169.207.62.121
Organization: ExecPC Internet - Milwaukee, WI
Newsgroups: a2000.comp.software.os.windows-nt,comp.os.ms-windows.nt,comp.os.ms-windows.nt.admin,comp.os.ms-windows.nt.admin.misc,comp.os.ms-windows.nt.admin.security,comp.os.ms-windows.nt.misc,comp.os.ms-windows.nt.software.backoffice,comp.os.ms-windows.nt.sof