Re: How to Allow DNS zone transfers to the Internet

  • From: "Jim Harrison" <jim@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 23 Sep 2004 16:43:37 -0700

Not bad; that was at least 30 minutes of searching / reading (I hope).
1 - bind the DNS server to the internal IP only
2 - server publish it there.

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!

----- Original Message ----- 
From: "Raji Arulambalam" <RajiA@xxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, September 23, 2004 16:36
Subject: [isalist] Re: How to Allow DNS zone transfers to the Internet


http://www.ISAserver.org


How do you server publish the ISA server itself for DNS.
Also how do you allow NTP traffic from the ISA server to get the time 
externally.?

RajiA


-----Original Message-----
From: Raji Arulambalam
Sent: Friday, September 24, 2004 10:44 AM
To: '[ISAserver.org Discussion List]'
Subject: RE: [isalist] Re: How to Allow DNS zone transfers to the
Internet


Hi
Thanks for the reply.
We host our own namespace plus 15 other associated organisations and the 
secondaries at another external host, so need to push them 
out. Makes it easier to make changes.
I'll read up on server publishing.

RajiA



-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Friday, September 24, 2004 9:53 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: How to Allow DNS zone transfers to the Internet


http://www.ISAserver.org

Q1 - why are you allowing zone transfers to the Internet; are you hosting root 
zones <I doubt it>?
Q2 - have you read the ISA help regarding server publishing?

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!

----- Original Message ----- 
From: "Raji Arulambalam" <RajiA@xxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Thursday, September 23, 2004 13:32
Subject: [isalist] How to Allow DNS zone transfers to the Internet


http://www.ISAserver.org

Hi

We host our own Internet DNS zone on the ISA 2k4 server. How do I allow queries 
and zone transfers from the internet.?
Is there any built in rule policies.? Or do I follow KB articles 291662 and 
292278 which was the way done in ISA2000.

Another question..
If I do a clean install of ISA server 2004, by default it has 30 builtin system 
policy rules and one firewall policy rule. If I then
import the configuration file created by the migration wizard from a ISA server 
2000, will it over write the existing system policy
rules.?

Thanks
RajiA

Email disclaimer: This email and any attachments are confidential. If you are 
not the intended recipient, do not copy, disclose or 
use the contents in any way. If you receive this message in error, please let 
us know by return email and then destroy the message. 
Environment Bay of Plenty is not responsible for any changes made to this 
message and/or any attachments after sending.
******************************************************
This e-mail has been checked for viruses and no viruses were detected.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
jim@xxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx



Other related posts: