Re: Same internal and external domain name, split-brain configuration

From: Kevin D. Goodknecht [MVP] (admin_at_nospam.LSAOL.COM)
Date: 02/29/04


Date: Sun, 29 Feb 2004 16:30:03 -0600

In news:upJy5uu$DHA.2524@TK2MSFTNGP10.phx.gbl,
Joseph <joseph@winstead.com> posted a question
Then Kevin replied below:
> We have a split-brain DNS configuration. I'm looking for a way to
> have http://www.mycompany.com and http://mycompany.com properly
> display our website on internal clients when using the same domain
> name for AD as our corporate site. Our corporate web site is hosted
> externally. Everything is setup properly for www.mycompany.com to
> work, but still haven't been able to find a way for
> http://mycompany.com to work internally.
>
> I've read quite a bit and have tried several configurations in a lab,
> but haven't seen anything 100% clear as to how to accomplish this.
> Outside of AD DNS I would just add a (same as parent folder) entry
> for the root of the domain that points to the external IP, but I'm
> concerned this could affect AD operations since every domain
> controller has the same type of entry (we have dns on all domain
> controllers). I've read up on SRV records, but haven't seen anything
> that clearly addresses this issue. In a lab, when adding a blank
> (same as parent folder) "A" record that points to the external
> address it seems to work, but intermittently and there is a delay on
> resolution when it does work. The SRV record approach has not worked
> at all up to this point.
>
> Has anyone seen a documented solution or have a configuration that is
> currently working in their environment?
>
> Thanks,
>
> Joseph

The method I have recommended is, that since this requires a blank host
record and that domain controllers will create a blank host for each IP on
them, install IIS on the DCs and use website redirection to redirect to
http://www.mydomain.com on the Home directory tab.
The blank host is required and must point to the DCs for group policies to
be applied, group policies are in the SYSVOL share
\\domain.com\SYSVOL\domain.com\policies if you change the blank host to
point to a webserver then members will look to the webserver for the SYSVOL
share.

-- 
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
============================
-- 
When responding to posts, please "Reply to Group"  via your
newsreader so that others may learn and benefit from your issue.
To respond directly to me remove the nospam. from my email.
==========================================
 http://www.lonestaramerica.com/
==========================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
 http://home.in.tum.de/~jain/software/oe-quotefix/
==========================================
Keep a back up of your OE settings and folders with
OEBackup:
 http://www.oehelp.com/OEBackup/Default.aspx
==========================================


Relevant Pages

  • Re: Wanting to place my hosted web on my server
    ... Port 80 is the default port for web services, ... Another method for unique website identification is the hostheader. ... IIS TIPS - Host Header - What is it: ... You mentioned earlier you installed DNS but wasn't ...
    (microsoft.public.windows.server.dns)
  • Re: IIS Website Question
    ... The default website listens regardless of host name. ... Make sure DNS is setup for.domain.local on your local DNS ... On your SBS server, ...
    (microsoft.public.windows.server.sbs)
  • Re: Best E-mail practices for SBS 2k3?
    ... The Website can remain hosted at the same company hosting it now (actually ... that is preferable) The DNS records at your Domain host has several A and MX ... The www.FQDN A record can remain pointed to your current web host. ... setup the ISP will need to setup a PTR record for you. ...
    (microsoft.public.windows.server.sbs)
  • Re: can not find server or DNS error
    ... I have a very curious problem with DNS and my website. ... Last time I setup two website using one Public IPA, and I use Host ... If hosting your own public DNS zone, you should have that zone on a separate ...
    (microsoft.public.windows.server.dns)
  • Re: [SLE] SuSE 9.3 DNS Unreliable
    ... spurious and unpredictable failures to resolve ... > host names. ... > ISP-supplied DNS server addresses and a default routing host) on a DSL ... Is it some kind of configuration ...
    (SuSE)