• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Workgroup computer with no internal DNS server

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> Workgroup computer with no internal DNS server Page: [1]
Login
Message << Older Topic   Newer Topic >>
Workgroup computer with no internal DNS server - 7.Jun.2008 2:14:23 PM   
ITEngineer

 

Posts: 270
Joined: 3.Feb.2006
Status: offline
hello Tshin,

i have this question, in the tmg help file the following is mentiond ;

quote:


Workgroup computer with no internal DNS server

The Forefront TMG computer is not a member of a domain, and there is no internal DNS server. Point DNS queries to the ISPís DNS servers in the External network. 


so if we do not have an internal dns server, its safe to put the ISP dns server on the external network card, what about the client ? should i also put the isp dns server on their network adapter ?

what rules should i create on isa server itself ?
Post #: 1
RE: Workgroup computer with no internal DNS server - 9.Jun.2008 4:42:04 AM   
HePa

 

Posts: 135
Joined: 9.May2008
From: Sweden, Gothenburg
Status: offline
How are the DNS configured on your internal network today?
Are you usinga AD domain or are all your clients within a workgroup?

If you have an internal AD domain, you can configur your Dynamic DNS servers to forward external queries to your ISP's DNS server, usinga conditional forwarder. An other solution is to configure the ISA server as a caching only DNS server and forward the DNS queries to the ISA server which resolves the external DNS queries.

_____________________________

HePa

(in reply to ITEngineer)
Post #: 2
RE: Workgroup computer with no internal DNS server - 9.Jun.2008 9:48:59 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
From what I understand, the TMG beta 1 is not supported in Workgroup mode.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to HePa)
Post #: 3
RE: Workgroup computer with no internal DNS server - 9.Jun.2008 1:23:02 PM   
HePa

 

Posts: 135
Joined: 9.May2008
From: Sweden, Gothenburg
Status: offline
Da*n, missed that this post was a TMG post...my bad.
Intresting if TMG is only supported in within a domain.
I've read some discussion of what's most secure, ISA server 2006 in domain or workgroup so if TMG is only going to be supported in domain it's going to be interesting to read about why that decision. Tom, if you have further information about TMG in domain or WG could you please post it?

_____________________________

HePa

(in reply to tshinder)
Post #: 4
RE: Workgroup computer with no internal DNS server - 9.Jun.2008 5:21:06 PM   
elmajdal

 

Posts: 6022
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: offline
Only this BETA 1 of TMG  must be a domain member .

Later on, with other built, or once the product is RTM'd , TMG will be supported as a domain member, and also in a workgroup.

_____________________________

Tarek Majdalani

Windows Expert - IT Pro MVP
Facebook : https://www.facebook.com/ElMajdal.Net

(in reply to HePa)
Post #: 5
RE: Workgroup computer with no internal DNS server - 9.Jun.2008 6:39:00 PM   
ITEngineer

 

Posts: 270
Joined: 3.Feb.2006
Status: offline
Hello tshin,

i posted this in the tmg forum, because i quoted the text from the tmg help file.

consider this an isa server04 or isaserver06,  and you have a workgroup isa server with no AD or internal dns server.

  1. how would you configure the network adapters on isa server ( internal & external )
  2. what about the dns on the clients network adapter ?



(in reply to ITEngineer)
Post #: 6
RE: Workgroup computer with no internal DNS server - 10.Jun.2008 11:16:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
With no domain and no authentication, you would use an external DNS server, since there's nothing the ISA Firewall needs to do with an internal DNS server.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to ITEngineer)
Post #: 7
RE: Workgroup computer with no internal DNS server - 15.Jun.2008 12:36:50 PM   
ITEngineer

 

Posts: 270
Joined: 3.Feb.2006
Status: offline
thank you Tom.

how about the internal clients ? can i set their dns as the ISP DNS ?

(in reply to tshinder)
Post #: 8
RE: Workgroup computer with no internal DNS server - 16.Jun.2008 11:43:05 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
If they don't need to resolve any internal names, then the ISP DNS will work fine too.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to ITEngineer)
Post #: 9
RE: Workgroup computer with no internal DNS server - 14.Jul.2013 1:57:09 AM   
wangpanpan

 

Posts: 2
Joined: 12.Jul.2013
Status: offline
welcome to my family . I like the Runescape Gold

and Buy RS Gold

and Diablo 3 Gold

what about you ?

(in reply to ITEngineer)
Post #: 10

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> Workgroup computer with no internal DNS server Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts