Re: *.com DNS best practice on SBS 2003?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Steve,

Here is a quote from the Getting Started guide:



As part of the DNS configuration of the server, the following changes are
made by running Setup:

" To prevent your DNS server from resolving queries for resources on the
Internet, the root zone that is automatically created when DNS is installed
is deleted and DNS is configured to listen only for DNS queries from the
local network.

" So that your internal DNS records are not available on the Internet, the
DNS server is unbound from the external network adapter.

" To allow your DNS server to resolve your local client computer's reverse
queries, a reverse lookup zone for the local subnet is created. A reverse
query resolves the IP address to the fully qualified host name of your
server.

" So that name resolution requests intended for the Internet are forwarded
to the DNS servers at your ISP, the Configure E-mail and Internet
Connection Wizard sets the DNS server addresses for your external network
adapter to the IP address of your local network adapter. Additionally,
forwarders are created so that internal name resolution is more efficient
and your internal host information is not broadcasted over the Internet.
If you do not want to use the DNS servers provided by your ISP, DNS
requests must instead use root hints. It is recommended that you use DNS
server information if it is available from your ISP. For more information
about root hints, see click Start, and then click Help and Support after
Setup is complete.

Note
A local DNS server does not limit your ability to host Web sites available
to the Internet on the server. For more information, click Start, click
Help and Support, and then search for "Hosting an Internet Web Site" after
Setup is complete.

If you host your own Web site on the server and your ISP requires you to
maintain your own DNS server on the Internet, it is recommended that you
install a second Windows server.

Using Windows Small Business Server 2003 to host a DNS server published to
the Internet results in a security risk for your local network. For more
information, search for article 254680 in the Knowledge Base at
http://go.microsoft.com/fwlink/?LinkID=4441.

I hope this is helpful

Tim Cummings [MSFT]
Microsoft Product Support Specialist
This posting is provided "AS IS" with no warranties, and confers no rights.

.

Quantcast