Re: Public DNS names for SBS 2K3 - Question

From: Dave Hibbeln (santaclaws_at_nospam.net)
Date: 02/21/04 

Date: Sat, 21 Feb 2004 16:36:39 -0500

Jeff,
In what document did you find these recommendations for DNS names.
They make sense and are similar what I setup in my external DNS.
I am curious to read the MS text.
I did not find any references to DNS naming conventions in the SBS2003 help
files.

Regards,
David R. Hibbeln

"Tony Su" <anonymous@discussions.microsoft.com> wrote in message
news:137e901c3f784$0735dca0$a401280a@phx.gbl...
> If that is exactly what the Small IT Solutions document
> says, it should be modified slightly... When configuring
> CNAMES, you don't map a name to an IP address, you map an
> alias name to an existing A hostname record.
>
> Let's see if I can explain this simply...
>
> Each of the suggested names (they are only suggestions)
> relate to different functions and reasons why someone
> might connect to your server. Personally, I would probably
> recommend "www" instead of "portal" because people are
> more familiar with "www" although "portal" is more
> descriptive.
>
> The reason why the CNAMEs are recommended is that it might
> make more sense to a User to connect a vpn
> using "vpn.business.com" instead of "portal.business.com"
>
> I have one customer who doesn't need all those CNAMES,
> they understand the concept that they can
> use "www.business.com" for <all> connections... web, ftp,
> vpn, everything.
>
> In other words, all the name does (any name) is simply map
> to an IP address. Depending on what protocol/service
> you're using, if you are using standard ports, the port is
> automatically configured and is not specially defined. If
> you are connecting to a service on a non-standard port
> (like Companyweb on port 444), then you need to specify
> that port regardless what name you use (remembering again
> that DNS only maps names to IP addresses, never specifying
> ports).
>
> Tony Su
>
>
>
>
>
> >-----Original Message-----
> >Hi,
> >As per SBS's help file, I have opened up the following
> ports on my Cisco
> >firewall and routed them to the same port on the SBS
> server.
> >
> >Service Port Protocol
> >----------- ---- ---------
> >web 80 TCP
> > 443 TCP
> >remote desktop 4125 TCP
> >PPTP VPN 1723 TCP
> >Mail 25 TCP
> >FTP 21 UDP
> >SharePoint 444 TCP
> > 3389 TCP
> >
> >In the 'Small IT Solutions, Small Business Service's
> document it recommends
> >a number DNS records be created. For example it
> recommends:
> >
> >FQDN Record
> Type IP
> >Address
> >------------------- -----------
> ---- ------
> >--------------
> >Businessname.com MX
> Record Static IP
> >on firewall
> >portal.businessname.com A
> Record Static IP
> >on firewall
> >remote.businessname.com CNAME Record
> Static IP on
> >firewall
> >mail.businessname.com CNAME Record
> Static IP on
> >firewall
> >vpn.businessname.com CNAME Record
> Static IP on
> >firewall
> >companyweb.businessname.com CNAME Record Static
> IP on firewall
> >
> >I think I understand the first two names, MX Record and A
> Record
> >respectively. My question is about the use of the rest
> of the list. Since
> >each one points to the same IP address, I guess the only
> difference would be
> >what port the traffic comes in on. So, what is the
> proper use of the
> >remote, mail, vpn, and companyweb names? On my client
> machine where would I
> >use these names?
> >
> >I hope this is not too silly a question....
> >
> >Jeff.
> >
> >
> >.
> >

Relevant Pages

  • Website setup questions.
    ... Create firewall rule to direct HTTP port 80 to the SBS External NIC ... Create firewall rule to point DNS port 53 to the SBS External NIC ... NICS to get this request to not timeout or be refused. ...
    (microsoft.public.windows.server.sbs)
  • RE: strange traffic on UDP port 53
    ... Replies to DNS queries should be coming FROM port 53, ... > found a similar problem with packets being stopped by our firewall. ... The destination IP is our mail server (not ...
    (Incidents)
  • Re: port 53, please help!
    ... >> port 53 as blocked. ... >to folks with a Win98 connected thru a firewall to internet. ... find out the IP addresses of all your DNS servers. ...
    (comp.security.firewalls)
  • Re: router security
    ... Is it a stateless firewall, or does it do "Stateful Packet Inspection" ... Or does it just build a general network address translation? ... For example, if you had a DNS server running on your Debian machine, ... approach of using UDP port 53 as the source port for the outgoing ...
    (comp.security.misc)
  • Public DNS names for SBS 2K3
    ... firewall and routed them to the same port on the SBS server. ... PPTP VPN 1723 TCP ... Small Business Service's document it recommends ...
    (microsoft.public.windows.server.sbs)