Welcome to ISAserver.org

add pc to dmz

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 Firewall] >> DMZ >> add pc to dmz

Page: [1]

Message

<< Older Topic Newer Topic >>

add pc to dmz - 4.Sep.2003 4:33:00 PM

isaserveradmin

Posts: 6
Joined: 4.Sep.2003
Status: offline

Hi,

My internal firewall is an isaserver that also runs dns. The server listens only on his internal ip address for dns requests. I have opened the ports so that this server can communicate with the dns server and AD but when I try to join the domain i can't still contact the dmz domain. As test I allowed all IP trafic from that server through my firewall whithout success. Can anyone help me?
How to put a server in a dmz?

greets

Post #: 1

Featured Links*

RE: add pc to dmz - 4.Sep.2003 10:55:00 PM

spouseele

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi isaserveradmin,

an external and DMZ host can never be a member of the internal domain unless you setup a VPN connection.

What do you want to accomplish?

HTH,
Stefaan

(in reply to isaserveradmin)

Post #: 2

RE: add pc to dmz - 8.Sep.2003 8:41:00 AM

isaserveradmin

Posts: 6
Joined: 4.Sep.2003
Status: offline

It is an dns server only for the dmz domain. But this server is also my isa server. Now I must through the firewall to add a server for my outlook web access. I want to put the OWA server between my external and internal (isa) firewall

(in reply to isaserveradmin)

Post #: 3

RE: add pc to dmz - 8.Sep.2003 2:28:00 PM

samuelss

Posts: 82
Joined: 26.Dec.2001
Status: offline

Hi isadmin,

May i please ask why you want to put your owa on the DMZ. You will agree that doing this will entail you open various ports between the dmz and your internatal network and am pretty sure you want to do all your best not to give a copy of your netwrk key to an attacker.

I will suggest you put your owa/mail in the internal network and get on with your life. This is much earsier to set up and administer. This method is surely more sure than you probably think.

Well.... the gurus might have a better advice for you.

thanks.

samuelss

(in reply to isaserveradmin)

Post #: 4

RE: add pc to dmz - 9.Sep.2003 9:35:00 AM

isaserveradmin

Posts: 6
Joined: 4.Sep.2003
Status: offline

hi samuelss,

I know i have to open all ports above 1024 but i still have an external firewall that blocks these ports. Can you give me a link where i can find more information about where to put my owa server and the security risks?

Thanks

(in reply to isaserveradmin)

Post #: 5

RE: add pc to dmz - 10.Sep.2003 2:11:00 AM

samuelss

Posts: 82
Joined: 26.Dec.2001
Status: offline

Hi isaseradmin

May be the following will help you.
http://www.isaserver.org/tutorials/pubowa2003toc.html
http://www.isaserver.org/Thomas_Shinder/

I have not tried the owa in the DMZ but what i have is the whole of exchange in the internal network and this works great for me.

I used several of Tom's articles and his ISA Server and Beyond Book to sort this out. There may be other articles on this site too that may help but i doubt if anybody ever tried to put owa in the dmz.

If you need any help regarding setting up your exchange in the internal network, am very much happy to help. I have no experience with owa in the dmz. may be Tom and other experienced guys might help, just post your question and am very sure they will be happy to help you.

Thanks.

sam

(in reply to isaserveradmin)

Post #: 6

RE: add pc to dmz - 10.Sep.2003 9:25:00 AM