Article View: a2000.comp.software.os.windows-nt
Article #13Re: DNS
From: ExecPC User
Date: Thu, 12 Nov 1998 00:00
Date: Thu, 12 Nov 1998 00:00
79 lines
4149 bytes
4149 bytes
I am sure you are using either a firewall app or a proxy server to protect your intranet from the internet, right? If not, please post the URL of you web server soI can get you fired in about 5 minutes. Your intranet SHOULD NOT BE ON A LEGAL ROUTABLE NETWORK. That is sheer lunacy. Put yor intranet on a private network where it belongs and you are another step closer to keeping your job. When you use a firewall, like checkpoint, you tell it how to handle inbound traffic. So...when traffic goes to your 1 legal IP address (the one your ISP gives you) it will look at the port on which the request is being made. If the call is to port 80 (web traffic, go to 192.168.0.56, the intranet webserver), if it is 21 (ftp traffic, send it to 192.168.0.87, the ftp server) you get the idea. It gets much more complicated from here. Say you have more than one web server, or you have multiple Exchange bridgehead servers....it gets more tricky. Now you are getting into scenarios where you need to have your own DNS that shares the firewall so you can do load balancing with MX records and stuff....... Keep it simple. Use a firewall or an application that supports inbound NAT or proxying, like checkpoint or MS Proxy 2.0. But if you do nothing else, get your network off the internet....otherwise you are asking for BIG TROUBLE! Good luck, Todd PS> what was that URL... Bill Tucek wrote in message <364A4FA6.A6531C9E@midtel.net>... >Hello: > > I would consider the implications to running your own DNS, firstly is this >something that is provided as a free by your ISP. Secondly are you willing to >devote a server and your time to setup and maintain it. Are you aware of the >implications if your DNS server goes down, ex. would the outside world be able >to get to your site? If you have a public web site and were unaware that your >DNS server was down this could cost you revenue. > > If these are an assigned IP address from your ISP you can have them setup >reverse DNS so you can map IP to address as well - at no additional time or cost >on your part! > >Bill > >Morrison wrote: > >> Who can give a quick lead how to install DNS in my network. >> I have a NT4.0-network and installed IIS. I'd like clients to be able to use >> names rather than IP-addresses to address local webservers. >> >> Further, our LAN is connected to an ISP for Internet (using NAT), so already >> DNS is installed on clients where it concerns resolving Internet-addresses. >> Obviously, the Intranet is a legal IP-range. >> >> How do I get both working ? >> >> Any tips books on this also appreciated. I couldn't resolve this using >> TCP/Ip from the MCSE course. >> >> Thanks! >> >> Morrison >
Technical Details
Message-ID:
<72g1jn$plk@newsops.execpc.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<71ikdt$1ck$1@newton.a2000.nl> <364A4FA6.A6531C9E@midtel.net>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fe2c9,3038099bdb9d7263 X-Google-Attributes: gidfe2c9,public X-Google-Thread: fb9cd,3038099bdb9d7263 X-Google-Attributes: gidfb9cd,public X-Google-Thread: 13baf1,3038099bdb9d7263 X-Google-Attributes: gid13baf1,public X-Google-Thread: 1151f2,3038099bdb9d7263 X-Google-Attributes: gid1151f2,public X-Google-Thread: f782f,f4b3ade3ba403e21 X-Google-Attributes: gidf782f,public X-Google-Thread: f977f,3038099bdb9d7263 X-Google-Attributes: gidf977f,public X-Google-Thread: f560d,3038099bdb9d7263 X-Google-Attributes: gidf560d,public X-Google-Thread: fa335,3038099bdb9d7263 X-Google-Attributes: gidfa335,public From: "ExecPC User" <End.User@No.Spam.com> Subject: Re: DNS Date: 1998/11/12 Message-ID: <72g1jn$plk@newsops.execpc.com> X-Deja-AN: 411289390 References: <71ikdt$1ck$1@newton.a2000.nl> <364A4FA6.A6531C9E@midtel.net> X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4 X-Complaints-To: abuse@execpc.com X-Trace: daily-planet.newsops.execpc.com 910920119 26292 (None) 169.207.62.121 Organization: ExecPC Internet - Milwaukee, WI Newsgroups: a2000.comp.software.os.windows-nt,comp.os.ms-windows.nt,comp.os.ms-windows.nt.admin,comp.os.ms-windows.nt.admin.misc,comp.os.ms-windows.nt.admin.security,comp.os.ms-windows.nt.misc,comp.os.ms-windows.nt.software.backoffice,comp.os.ms-windows.nt.sof