Re: Static IP

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 12/21/04 

Date: Tue, 21 Dec 2004 10:50:21 -0500

Clay Gerrard wrote:
> We're migrateing to a static IP so that we can have a regestiered
> domain name for our email address (i.e. username@companyname.com).
>
> This is a first for me, and I'm a little confused. I'm just getting
> one ip. The router has my SBS server as the primary DNS (and my ISP's
> as secondaries).

What do you mean? Your router config should not specify anything in your LAN
IP range. What kind of router are you using - is this your Internet modem?
Are you using ISA?

Internally, make sure that all servers and workstations specify *only* the
internal AD-integrated DNS server's IP address in their network settings.
The AD-integrated DNS server itself on SBS should be set up with forwarders
to your ISP's DNS servers for external resolution and/or use root hints

> My understanding will be that if I point the MX
> record for my domain (companyname.com - hosted on godaddy) to the ip
> that my ISP is assigning to my router - any thing on companyweb.com
> (e.g. smtp.company.com) will get resolved by the SBS DNS.

I think you've misunderstood how this works. Your SBS DNS is *internal
only*. That's Active Directory, and it has nothing to do with the outside
world.

> But I read
> somewhere its not a good idea to host the DNS for companyname.com and
> companyname.local on the same machine.

Correct - but it doesn't sound like you'd be hosting your public DNS in
house anyway, which is a good thing.
>
> Any education on this subject would be appreciated. Windows SBS2003
> Administrators Companion doesn't go into detail on this subject.

General notes:

* Your public DNS should be hosted by Godaddy or whomever

* Your router/firewall/ISA/whatever should be doing NAT - all internal
machines/servers need private IP addresses

* Port 25 needs to be open inbound to the private IP of your SBS server

* Your public DNS folks need to create an A record/host - mail.mydomain.com,
specifying your public IP - and your primary MX record for mydomain.com
should point to mail.mydomain.com. You should also have someone else act as
backup (secondary MX) - see www.dyndns.org 's MailHop BackupMX for one
inexpensive option. You must not try to specify an IP address as your MX
record - this is a violation of the RFCs.

* Your recipient policy needs to specify mydomain.com as the default SMTP
address space - and all mailboxes need to be set to inherit from the policy
(the CEICW should do this for you)

Relevant Pages

  • Re: ISA and DNS ...
    ... He is running it all on the SBS server ... can buy a whole lot of off site hosting and DNS management for 2-3 thousand ... Cris Hanna [SBS - MVP] ... it's perfectly safe to manage your private and public DNS on two> separate machines so that your private DNS records are not accessible or> published to the Internet while your public records are. ...
    (microsoft.public.windows.server.sbs)
  • Issues migrating SBS 2003 domain to Server 2008 Standard
    ... We are stuck migrating our SBS 2003 domain to Server 2008. ... Fatal Error:DsGetDcName (SRV-EXCH) call failed, ... Verify your Domain Name Sysytem (DNS) is ... network connectivity to a domain controller. ...
    (microsoft.public.windows.server.sbs)
  • Re: AD management snap in cannot find DC (netdiag /v workstation)
    ... The name.local entries are used by my apache server to implement ... change button, more button, the "Primary DNS suffix of this ... Attr: subschemaSubentry ... Owner of the binding path: ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD management snap in cannot find DC (netdiag /v workstation)
    ... button, more button, the "Primary DNS suffix of this computer", it should ... The Security System could not establish a secured connection with the server ... Attr: subschemaSubentry ... Owner of the binding path: ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD management snap in cannot find DC (netdiag /v workstation)
    ... DNS Host Name: tonyb-pc.imageproc.imageproc.com ... Testing IpConfig - pinging the DHCP Server... ... Attr: subschemaSubentry ... Owner of the binding path: ...
    (microsoft.public.windows.server.active_directory)