Welcome to ISAserver.org

Split DNS and Configuring Multiple DMZs on the ISA Firewall (2004) - Part 2:

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> DMZ >> Split DNS and Configuring Multiple DMZs on the ISA Firewall (2004) - Part 2:

Page: [1]

Message

<< Older Topic Newer Topic >>

Split DNS and Configuring Multiple DMZs on the ISA Fire... - 31.Aug.2004 5:19:00 AM

xmlparser

Posts: 17
Joined: 13.Nov.2003
From: Florida
Status: offline

As a small enterprise development business (just getting started), I donÆt plan on a lot of traffic, just clients accessing a content management system in an authenticated perimeter network. I was planning to publish all services behind the back-end ISA server. The challenge is thatI have only four LAN interfaces (NICs) one for each network zone; External, Anonymous (public), Authenticated and Internal.

The challenge is where do place the ôDNS Resolverö The DNS Resolvers in the DMZ are caching-only DNS servers that act as forwarders for the DNS servers on the internal networkö(Shinder, 2002). The Web server and the Advertising DNS will be published in the Anonymous DMZ (using a P3 server running Windows 2003 and Virtual Server 2005). Does the Resolver DNS reside on the same subnet IP address as the Advertiser DNS and the Web server in the Anonymous DMZ? If so then I can publish both DNSs behind the ISA server in the Anonymous DMZ. Or do they require a different subnetIP address? If so do I publish one of the DNSs on the ISA server? If so which one Advertiser or Resolver?

See: http://www.isaserver.org/tutorials/You_Need_to_Create_a_Split_DNS.html

Post #: 1

Featured Links*

RE: Split DNS and Configuring Multiple DMZs on the ISA ... - 31.Aug.2004 7:45:00 AM

tshinder

Posts: 47439
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi XML,

The advertiser is the machine that publishes your public entries, the resolver is the one that resolves names for the internal network hosts.

HTH,
Tom

(in reply to xmlparser)