Re: DMZ

Jim,
 
I'm just curious since I've set everything up at least to what I thought
were the right guidelines found from the newsgroups and isaserver.org.
But, only one of my sites can be accessed from outside of my network.
It's almost as if my servers are not the primary DNS server anymore.
Nslookup just shows my internal DNS and the internal web.
I have all my books all over my desk, tcp/ip, mcse network admin and
will continue tracking this down.
 
Thanks for the answer!  
 
Joseph
 
 
-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] 
Sent: Monday, August 20, 2001 9:28 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: DMZ
 
http://www.ISAserver.org
Ina back-to-back scenario, you have an ISA (or other firewall)
separating the DMZ from the Internet.  What you use for IP addresses is
up to you, but using public IPs in a network that is not reachable from
the Internet makes no sense.
If ISA is the frontline firewall, you would publish the DMZ servers
using the frontline ISA just as if they were in its LAT (because they
are).

Jim Harrison
MCP(2K), A+, Network+, PCG
----- Original Message ----- 
From: cismic <mailto:cismic@xxxxxxx>  
To: [ISAserver.org <mailto:isalist@xxxxxxxxxxxxx>  Discussion List] 
Sent: Monday, August 20, 2001 9:06 AM
Subject: [isalist] DMZ
 
http://www.ISAserver.org
In a Back To Back ISA server setup, can the DMZ machines use public
address rather then private address?
And 2. If they are private address, how is the DNS machine published to
the world if your running the primary server in the DMZ for your sites?
 
 
Thank you,
 
Joseph
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

Other related posts: