DNS Forwarders

Tech-Archive recommends: Fix windows errors by optimizing your registry

I have ISA 2006 and Windows 2003 SP2 Domain Controller which is the internal
DNS Server. ISA Server is a domian member.

I need to know what are the proper settings for both ISA and DC network
interface and DNS.

I checked on the internet and found that there should be no ISP's DNS IP
address in ISA Server External NIC and the Internal DNS Server should be
configured with ISA DNS servers' ip addresses as forwarders.

When i removed ISP DNS Servers' ip address from the External NIC of ISA,
internet access stopped for my users.

Secondly, i am getting errors in ISA system logs that the DC IP address has
reached the maximum number of TCP connections and has been blocked.

Can anybody tell me what is the best, secure and proper way to configure DNS
and ISA External NIC?

Is it good to use forwarders on your DC which is a DNS and DHCP Server too?

Thanks!

.

Relevant Pages

  • Re: DNS filter question
    ... Packet filters allow services and applications on the ISA itself to reach the Internet. ... That particular filter allows ISA to make DNS lookups. ... I have installed and configured internal DNS server (not on the same box ...
    (microsoft.public.isa)
  • Re: HTTP trouble in 2004
    ... >I appear to be an ISA dummy and have a small problem. ... My nics are setup with teh DC being the DNS server and my IE ... Proxy error and I can't get any internet traffic. ...
    (microsoft.public.isaserver)
  • Re: Binding A Server To A Specific IP Address
    ... I have multiple IPs on the external ISA NIC. ... For DNS requests from the Internet to my DNS Server: ...
    (microsoft.public.isaserver)
  • RE: ISA Errors
    ... DNS Service as the DNS Server. ... On the DNS Server, create the DNS Forwarder to forward the external DNS ... Make sure the latest version of ISABPA is installed on the ISA box. ... Microsoft Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Name resolution for VPN Clients
    ... controlled by the ISA when connected by VPN etc. ... intents and purposes the internal DNS server does indeed to be resolving the ... The Internet Device should never be involved in any ... Understanding the ISA 2004 Access Rule Processing ...
    (microsoft.public.isa.vpn)