Re: Setup DNS for internal users but keeping namespace same for ex

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

What is the firewall make and model? Many firewalls have a DMZ function.
Even my home ADSL one does!


"JPRICE" <JPRICE-please@xxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:FF075FB7-DFEF-489D-A5D6-BC960648E71D@xxxxxxxxxxxxxxxx
> Thank you for your response.
> For equipment, I have one FW and one switch. The Win2003 SE is running
> only
> Apache, no IIS, no domain, no DNS.
> When in the office, I want the data traffic to be limited between
> PC-switch-server, without having to go out to the FW and a public DNS thus
> bogging down the 1.5mb IN-pipe traffic serving incoming requests for
> clients
> and home users.
>
> Without having extra equipment to play and test, I can only rely on
> research
> and opinions of the much more experienced network engineers.
>
> thanks.
>
>
>
> "andy_cafferkey@xxxxxxxxxxx" wrote:
>
>> Hi There
>>
>> Why not locate the server in a DMZ. give it one public IP address.
>> Configure
>> the firewall with the relevent rules to protect the server whilst
>> allowing
>> the access needed. e.g. prehaps allow windows RDP connections from inside
>> the LAN to the DMZ, but only port 80 WWW access from the Internet to the
>> DMZ.
>>
>> Andy
>>
>>
>> "JPRICE" <JPRICE@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:7EC09F03-AE3C-445A-9C8F-CAFD1FAC204C@xxxxxxxxxxxxxxxx
>> > I'm at a startup comp tasked with setting up a new network.
>> > The Windows Server 2003 running Apache SW is at the owners home.
>> > The developers and QA staff work out of there homes or the office.
>> > Everyone uses DNS name to access the server from their remote locations
>> > or
>> > the office.
>> >
>> > The plan is to bring the server into an office suite locating it behind
>> > a
>> > firewall and a switch. In doing this, make the necessary IP changes to
>> > the
>> > server reflecting a secure static non-public IP address behind the FW
>> > (10.x.x.x) with the WAN port being a public IP address available for
>> > incomming WAN users. Internal users will be served private DHCP
>> > (served
>> > via
>> > FW) when using the office network.
>> >
>> > My question is, can I setup an internal DNS name (pocket.case.com) to
>> > reflect the public DNS name also (pocket.case.com) so when developers
>> > and
>> > QA
>> > are on the office network, they can still access (pocket.case.com)
>> > server
>> > without sending data past the switch and firewall to the public DNS and
>> > coming back in? Yet the public still has access to the public DNS via
>> > the
>> > Public IP via rule on the firewall to the private IP address on the
>> > internal
>> > network.
>> >
>> > To make this happen, I would plan on using the two NIC's in the server,
>> > one
>> > bound to the public IP address and the other bound to the internal IP
>> > address. Is there something I am missing? Can I add a DNS service on
>> > the
>> > 2003 server without requiring additional hardware?
>> >
>> > My goal is to allow seemless communication for staff no matter where
>> > they
>> > maybe sitting, home or in the office, yet provide the best security
>> > possible
>> > while still building the startup business without having lots of cash.
>> >
>> > Your wisdom and support are always greatly appreciated!
>> >
>> > Thanks,
>> > Jeff
>>
>>
>>


.

Relevant Pages

  • Re: Unable to join AD domain from DMZ network
    ... To me that points to something outside the machine (Firewall most likely culprit) ... > the captured traffic between the server in DMZ to the DC from internal ... >>> authentication from DMZ to 2003 AD internal network. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Best practice to setup a DMZ? (hyperV and guests)
    ... this time with an edge server (its my understanding that the ... So my goal here is to setup this edge server for OCS and setup exchange 2010 ... correctly dmz wise (not clear on how that would be yet.. ... The most common setup is the back to back firewall model, where you have one firewall between the Internet and the DMZ and another between the DMZ and the LAN. ...
    (microsoft.public.windows.server.networking)
  • Re: Server hacked/being used as spammers haven...
    ... Given it's position in the dmz and not sure what firewall has been protecting it, your best bet is to have someone review the box in detail. ... The DMZ is not a protected area, it allows ALL internet traffic to your server - and that's VERY BAD - you may as well have just connected it directly to the ineternet and put out a sign that says FREE SERVER - HACK HERE. ... No, you need a real firewall, and then go with a single NIC and then you can VPN into the firewall itself, then create rules in the firewall that allow access to the network. ...
    (microsoft.public.windows.server.sbs)
  • Re: Member Server Login Slow DMZ-Internal Subnet
    ... But did I mention that the firewall log showed a successful port 53 ... connection to each DC from the DMZ machine? ... the DMZ machine is the closest AD DC DNS. ... Member Server which was originally installed in the internal subnet ...
    (microsoft.public.win2000.security)
  • Re: NEED Help with Basic Networking Questions
    ... The domain name is I have the PDC server also ... Do not put this on your LAN at all. ... Your firewall should be doing NAT for you, so as long as you don't need to ... Your public DNS should be hosted by someone else, ...
    (microsoft.public.windows.server.general)