Welcome to ISAserver.org

[Solved] dns problem

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> Installation and Planning >> [Solved] dns problem

Page: [1]

Message

<< Older Topic Newer Topic >>

[Solved] dns problem - 15.Apr.2008 4:45:34 AM

FORSTERA

Posts: 7
Joined: 3.Oct.2007
Status: offline

[Solved] Hello all,
I'm really not a guru in dns configuration .We changed yesterday our internet connection to have a fix IP address. Till there, impossible to solve external dns queries. We have the following configuration :

Router : Internet Fix ip addres
            Internal 10.10.10.1

isa server : WAN network card : IP    10.10.10.1
                                                  DG   10.10.10.1
   DNS 10.10.10.1 (
                  LAN network card : IP   192.168.100.1
                                                  DG empty
                                                  DNS 192.168.100.5

I nternal DNS Server (DC) : IP 192.168.100.5
                                           DG 192.168.100.1
                                           DNS 127.0.0.1

Configuration of internal DNS Server : no forwarders configured (emtpy list)
                                                          root hints are configured

I created a rule access on ISa to allow DNS outbound from our internal DNS server.
I can surf on internet but impossible to resolve dns queries . I cannt send email, too using iis on ISA; i get smtpsvc 4000 and 4006 errors ..
Any help is welcome
Per advance, thanks for your help
Best Regards
Arnaud

< Message edited by FORSTERA -- 17.Apr.2008 1:14:05 AM >

Post #: 1

Featured Links*

RE: dns problem - 15.Apr.2008 8:28:45 AM

matt.jones

Posts: 67
Joined: 16.Aug.2007
Status: offline

You should remove the DNS server address from the external NIC.

_____________________________

Matt Jones
MCSA/MCSE+Messaging+Security/CCNA/RSA CSE

(in reply to FORSTERA)

Post #: 2

RE: dns problem - 15.Apr.2008 9:01:38 AM

FORSTERA

Posts: 7
Joined: 3.Oct.2007
Status: offline

Thanks for your answer. I already did that but after the change, clients could not surf on internent any more and this did not solved my dns resolution problem.
On isa, I can see that my internal dns server transmitt requests to root hints but no answer come back ...

(in reply to matt.jones)

Post #: 3

RE: dns problem - 15.Apr.2008 9:59:01 AM

matt.jones

Posts: 67
Joined: 16.Aug.2007
Status: offline

Are there any other devices in front of the ISA Firewall, i.e. router or front-firewall? What network template have you used?

(in reply to FORSTERA)

Post #: 4

RE: dns problem - 15.Apr.2008 10:23:32 AM

FORSTERA

Posts: 7
Joined: 3.Oct.2007
Status: offline

I've a router with a fix ip address (sua mode). I've a "3 legs perimeter" but the 3rd is, for the while, disabled.
My dc (and dns) server is in a virtual server, dont know if this can be a problem ..
Thanks
Arnaud

(in reply to matt.jones)

Post #: 5

RE: dns problem - 15.Apr.2008 12:09:05 PM

matt.jones

Posts: 67
Joined: 16.Aug.2007
Status: offline

What relationship is configured between the network where your DNS server is located and the network where your router is located? Route or NAT?

(in reply to FORSTERA)

Post #: 6

RE: dns problem - 16.Apr.2008 2:14:18 AM

FORSTERA

Posts: 7
Joined: 3.Oct.2007
Status: offline

This is nat mode (sua) I maybe found the problem according to my virtual server. I've found an article talking about dns resolution problem. So I made a new "not in a virtual server" dns server as primary and eveything works fine now.
Thanks for your help
Arnaud

(in reply to matt.jones)

Post #: 7