RE: Foreign Domain

  • From: "Mike Carlson" <domitianx@xxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 23 Jan 2002 18:58:21 -0600

My internal DNS servers are separate boxes from the ISA box. They are not
accessible from the outside world. The WWW box is a separate box.

So for every *.domain.com I host, I will have to have an internal DNS zone
setup for it. So I could theoretically have a whole crap load of internal DNS
zones.

Isnt there a better way to do this? When I was running Sygate, I just sent
port 80 to my WWW box and it just took the host header and served up the
correct pages. Would I be able to do that if I got Server Publishing to work
instead of Web Publishing?

********************
Mike Carlson
http://www.domitianx.com
domitianx@xxxxxxxxxxxxx
********************  

-----Original Message-----
From: Joseph [mailto:cismic@xxxxxxx] 
Sent: Wednesday, January 23, 2002 6:46 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Foreign Domain


http://www.ISAserver.org


Yes, it should work that way with or with out a DMZ.  
The only issue is a security issue. And, that is
Having your internal names also on the same DNS box.
As in my sample it would be to the External interface: Domain1.com
        WWW     198.0.0.10 (EXT public NIC)
Domain2.com 
        WWW     198.0.0.10 (EXT public NIC)
This would then be www.Domain1.com and www.Domain2.com respectively.

Joseph
-----Original Message-----
From: Mike Carlson [mailto:domitianx@xxxxxxxxxxxxx] 
Sent: Wednesday, January 23, 2002 4:39 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Foreign Domain

http://www.ISAserver.org


OK, I got it to work, but only after I created a domain2.net zone on my
internal DNS server and made a www host record pointing to the IP of my www
box.

Is this how it is supposed to work?

********************
Mike Carlson
http://www.domitianx.com
domitianx@xxxxxxxxxxxxx
********************  

-----Original Message-----
From: Mike Carlson 
Sent: Wednesday, January 23, 2002 5:32 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Foreign Domain


http://www.ISAserver.org


Well I have the ISA box going into the DSL modem and everything else behind
it. I don't have a DMZ. I have plenty of websites running on one box using
host headers, but they all use the domain.com with different host names. The
only one I am having a problem with is www.domain2.com

I have a destination set of www.domain2.com which points to www.domain2.com
and a web publishing rule that has has the destination set of www.domain2.com
pointing to the IP of the internal WWW box. The host header is configured to
listen for www.domain2.com on that particular site.

Do I need to create a domain2.com zone on my internal DNS servers for this to
work?

********************
Mike Carlson
http://www.domitianx.com
domitianx@xxxxxxxxxxxxx
********************  

-----Original Message-----
From: Joseph [mailto:cismic@xxxxxxx] 
Sent: Wednesday, January 23, 2002 5:16 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Foreign Domain


http://www.ISAserver.org


In my setup I use back to back with the DMZ in the middle.
I keep a DNS server in the DMZ that contains all public IP addresses. You can
have multiple public domains listed on that DNS machine.

Domain1.com
        WWW     198.0.0.10 (sample public NIC)
        FTP     198.0.0.10 (sample public NIC)
        SQL     198.0.0.10 (sample public NIC)
Domain2.com 
        WWW     198.0.0.10 (sample public NIC)

When you setup destination sets you would have a destination Set for both
domains going to each domain. And web publishing going to both domains. And,
by selecting The include original header you can actually 
Setup your web server to use host headers and you should be able 
To have multiple websites running using only 1 IP address.
The above is only the real short explination.
Search the news groups at http://www.isaserver.org for additional Information
with "HOST HEADERS", "DNS AND ISA" as key words.

Joseph

-----Original Message-----
From: Mike Carlson [mailto:domitianx@xxxxxxxxxxxxx] 
Sent: Wednesday, January 23, 2002 3:09 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Foreign Domain

http://www.ISAserver.org


Can I host a foreign domain behind ISA?

My internal AD is domain1.com and I want to host a website for domain2.com. I
have ISA Standard not enterprise installed so there should be no integration
with AD at all.

Do I have to configure something in the LAT or LDT? All the sites I host
works fine that are using the same domain like bob.domain1.com and
joe.domain1.com work fine. I am having a problem with www.domain2.com

I have the host header on the WWW box set to use that domain name for the
site.

I created a destination set of www.domain2.com which points to the IP of the
WWW server. I created a web publishing rule to forward any requests to that
same IP using the original host header.

Thanks,

********************
Mike Carlson
http://www.domitianx.com
domitianx@xxxxxxxxxxxxx
********************  

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
domitianx@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
domitianx@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
cismic@xxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
domitianx@xxxxxxxxxxxxx To unsubscribe send a blank email to
$subst('Email.Unsub')


Other related posts: