RE: DNS Using Quick Start Guide

Hi John,

Exactly. The QS guide was really aimed at simple setups that didn't have
complex requirements. I do typically run the ISA machine as a caching
only forwarder with a DNS server installed with a stub zone, but its not
required. 

Thanks!
Tom 

-----Original Message-----
From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] 
Sent: Monday, July 12, 2004 4:30 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: DNS Using Quick Start Guide

http://www.ISAserver.org

If you are basing any rules on domain users/groups, ISA needs to know
how to communicate with the domain as well.

You are better off pointing all at the internal DNS, and having that
configured with multiple forwards. If you only have one DC, if it is
down, the domain is down anyways.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


> -----Original Message-----
> From: Tom Rogers [mailto:trogers@xxxxxxxxxxxxxxxxxx]
> Sent: Monday, July 12, 2004 1:46 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: DNS Using Quick Start Guide
> 
> http://www.ISAserver.org
> 
> Thanx Tom and John.
> 
> What I did was to make ALL internal PCs Primary DNS server IP the W2K 
> AD
DNS
> Server IP, made the Secondary DNS server IP the ISA internal adapter 
> IP
addr. I left
> the ISA Server Primary DNS server IP that of the internal adapter IP 
> addr
of the ISA
> server. Hope this is ok, cause it works.
> 
> -Tom
> 
> 
> > -----Original Message-----
> > From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> > Sent: Monday, July 12, 2004 2:27 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] RE: DNS Using Quick Start Guide
> >
> >
> > http://www.ISAserver.org
> >
> > Hi Tom,
> >
> > The QS guide is for simple deployments. However, it will work find 
> > as long as you have configured the DNS server on the ISA firewall 
> > with a stub zone for the Internal network's domain. When the ISA 
> > firewall uses itself as its preferred DNS server, it uses the 
> > information in the stub zone to query the Internal network's DNS 
> > server. I put one of these together today for a customer and it 
> > worked a treat, so I know it works
> > :-)
> >
> > HTH,
> >
> > Tom
> > www.isaserver.org/shinder
> > Get the book!
> > Tom and Deb Shinder's Configuring ISA Server 2004
> > http://tinyurl.com/3xqb7
> > MVP -- ISA Firewalls
> >
> >
> >
> > -----Original Message-----
> > From: Tom Rogers [mailto:trogers@xxxxxxxxxxxxxxxxxx]
> > Sent: Monday, July 12, 2004 1:09 PM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] DNS Using Quick Start Guide
> >
> >
> > http://www.ISAserver.org
> >
> > According to the Quick Start guide that I used to get my ISA server 
> > up and running, I need to put the IP Addr of the ISA server as the 
> > Primary DNS server IP for my DHCP clients.
> >
> > I have a W2K Active Directory domain with a DNS server already on 
> > the internal network. I have noticed that if I do as the Quick Start

> > guide says, (Use the IP of the ISA Server as my primary DNS server),

> > I can no longer ping my domain name. Also, select services on 
> > servers, that use the Domain Admin acct, will not start because they

> > cannot find the Domain Admin acct. Also, when joining a new computer

> > to my domain, I have to use the old NetBIOS domain name because I 
> > get an error stating that mydomain.net does not exist or cannot be 
> > found. (I have WINS IP doled out by the DHCP running on ISA)
> >
> > Now, I setup the DNS service on the ISA server EXACTLY as the Quick 
> > Start guide states. So why is this happening?
> >
> > (As a work around, I have made the Primary DNS IP Addr that of the 
> > Internal DNS server, and the ISA server IP Addr is now the secondary

> > DNS. Everything works fine this way. PLUS all clients that are 
> > allowed Internet Access, have it.)
> >
> > TIA,
> >
> > -TRR
> >
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com 
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org 
> > Windows Security Resource Site: http://www.windowsecurity.com/ 
> > Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax

> > Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List
as:
> > tshinder@xxxxxxxxxxxxxxxxxx
> > To unsubscribe visit
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > World of Windows Networking: http://www.windowsnetworking.com 
> > Leading Network Software Directory: http://www.serverfiles.com
> > No.1 Exchange Server Resource Site: http://www.msexchange.org 
> > Windows Security Resource Site: http://www.windowsecurity.com/ 
> > Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax

> > Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion List 
> > as: trogers@xxxxxxxxxxxxxxxxxx To unsubscribe visit 
> > http://www.webelists.com/cgi/lyris.pl?enter=isalist
> >
> >
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com Leading 
> Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org Windows 
> Security Resource Site: http://www.windowsecurity.com/ Network 
> Security Library: http://www.secinf.net/ Windows 2000/NT Fax 
> Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> johnlist@xxxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org Windows
Security Resource Site: http://www.windowsecurity.com/ Network Security
Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist

Other related posts: