RE: DNS Using Quick Start Guide

  • From: "Tom Rogers" <trogers@xxxxxxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 12 Jul 2004 16:45:53 -0400

Thanx Tom and John.

What I did was to make ALL internal PCs Primary DNS server IP the W2K AD DNS 
Server IP, made the Secondary DNS server IP the ISA internal adapter IP addr. I 
left the ISA Server Primary DNS server IP that of the internal adapter IP addr 
of the ISA server. Hope this is ok, cause it works.

-Tom


> -----Original Message-----
> From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx]
> Sent: Monday, July 12, 2004 2:27 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] RE: DNS Using Quick Start Guide
> 
> 
> http://www.ISAserver.org
> 
> Hi Tom,
> 
> The QS guide is for simple deployments. However, it will work find as
> long as you have configured the DNS server on the ISA firewall with a
> stub zone for the Internal network's domain. When the ISA 
> firewall uses
> itself as its preferred DNS server, it uses the information 
> in the stub
> zone to query the Internal network's DNS server. I put one of these
> together today for a customer and it worked a treat, so I 
> know it works
> :-)
> 
> HTH,
> 
> Tom
> www.isaserver.org/shinder
> Get the book!
> Tom and Deb Shinder's Configuring ISA Server 2004
> http://tinyurl.com/3xqb7
> MVP -- ISA Firewalls
> 
> 
> 
> -----Original Message-----
> From: Tom Rogers [mailto:trogers@xxxxxxxxxxxxxxxxxx] 
> Sent: Monday, July 12, 2004 1:09 PM
> To: [ISAserver.org Discussion List]
> Subject: [isalist] DNS Using Quick Start Guide
> 
> 
> http://www.ISAserver.org
> 
> According to the Quick Start guide that I used to get my ISA server up
> and running, I need to put the IP Addr of the ISA server as 
> the Primary
> DNS server IP for my DHCP clients.
> 
> I have a W2K Active Directory domain with a DNS server already on the
> internal network. I have noticed that if I do as the Quick Start guide
> says, (Use the IP of the ISA Server as my primary DNS 
> server), I can no
> longer ping my domain name. Also, select services on servers, that use
> the Domain Admin acct, will not start because they cannot find the
> Domain Admin acct. Also, when joining a new computer to my domain, I
> have to use the old NetBIOS domain name because I get an error stating
> that mydomain.net does not exist or cannot be found. (I have WINS IP
> doled out by the DHCP running on ISA)
> 
> Now, I setup the DNS service on the ISA server EXACTLY as the Quick
> Start guide states. So why is this happening?
> 
> (As a work around, I have made the Primary DNS IP Addr that of the
> Internal DNS server, and the ISA server IP Addr is now the secondary
> DNS. Everything works fine this way. PLUS all clients that are allowed
> Internet Access, have it.)
> 
> TIA,
> 
> -TRR
> 
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion List as:
> tshinder@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> 
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> World of Windows Networking: http://www.windowsnetworking.com
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion 
> List as: trogers@xxxxxxxxxxxxxxxxxx
> To unsubscribe visit 
> http://www.webelists.com/cgi/lyris.pl?enter=isalist
> 
> 


Other related posts: