Re: clients dns settings


"jamestulloch" <james@xxxxxxxxxxxxxxxx> wrote in message
news:1167305048.621286.236860@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi All,

Should I allow clients to resolve internet adresses by seeting up
forwarding on my DNS servers. All my DNS servers are DCs in Windows
2003 native domain.

Almost always: Yes.

Internal clients must point STRICTLY to internal DNS servers.

Let those servers forward to your firewall or ISP for the actual
resolution of external names.

I was going to just force all internet lookups to go via IE and proxy
server.

What are the security implications of allowing this. I read somewhere
that the DNS acket will contain information about the ip address
structure and naming of our domain. Is this true? Does it matter?

TIA

James Tulloch



.

Relevant Pages

  • Re: Windows cannot find the network path error message in GPMC
    ... Preferred DNS server. ... bar of the Network Connections window, ... sure you have Forwarders to your ISP DNS servers Enabled. ... preventing access to this computer from the Internet" is Not checked on this ...
    (microsoft.public.windows.group_policy)
  • Re: Domain Name 2 NS Mapping
    ... On the Public DNS you will create records that have names and IPs to point ... Also if a internet user has to connect to our website ... Internet user's DNS servers will ask the DNS servers listed on your Public ... network, these IPs cannot be routed accross the internet. ...
    (microsoft.public.windows.server.dns)
  • Re: DNS problem - 2 IP addresses on one adapter
    ... the name is available via public DNS and resolves to our ... another FQDN which on public DNS servers resolves to the same external IP, ... But this would override (on the clients) the DNS request ... 192.168.x.y won't route on the Internet. ...
    (microsoft.public.windows.server.dns)
  • Re: AD Replication: What Does "Fully Routed" Mean?
    ... > pointing to two DNS servers could cause problems for Active Directory. ... you to resolve the Internet. ...
    (microsoft.public.win2000.active_directory)
  • Re: Internal (AD) vs. external (Internet) DNS namespace
    ... Internet clients can do that but your internal folks ... records to two DNS servers, are there any other reasons why this is a bad ... wouldn't everybody be able to reach the web site by domain name alone, ... Internet domain name, mycompany.com. ...
    (microsoft.public.windows.server.active_directory)