Thanks Jim. Did also some printing!! RajiA -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Friday, September 24, 2004 11:44 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: How to Allow DNS zone transfers to the Internet http://www.ISAserver.org Not bad; that was at least 30 minutes of searching / reading (I hope). 1 - bind the DNS server to the internal IP only 2 - server publish it there. Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ----- Original Message ----- From: "Raji Arulambalam" <RajiA@xxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Thursday, September 23, 2004 16:36 Subject: [isalist] Re: How to Allow DNS zone transfers to the Internet http://www.ISAserver.org How do you server publish the ISA server itself for DNS. Also how do you allow NTP traffic from the ISA server to get the time externally.? RajiA -----Original Message----- From: Raji Arulambalam Sent: Friday, September 24, 2004 10:44 AM To: '[ISAserver.org Discussion List]' Subject: RE: [isalist] Re: How to Allow DNS zone transfers to the Internet Hi Thanks for the reply. We host our own namespace plus 15 other associated organisations and the secondaries at another external host, so need to push them out. Makes it easier to make changes. I'll read up on server publishing. RajiA -----Original Message----- From: Jim Harrison [mailto:jim@xxxxxxxxxxxx] Sent: Friday, September 24, 2004 9:53 AM To: [ISAserver.org Discussion List] Subject: [isalist] Re: How to Allow DNS zone transfers to the Internet http://www.ISAserver.org Q1 - why are you allowing zone transfers to the Internet; are you hosting root zones <I doubt it>? Q2 - have you read the ISA help regarding server publishing? Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ----- Original Message ----- From: "Raji Arulambalam" <RajiA@xxxxxxxxxxxxxx> To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx> Sent: Thursday, September 23, 2004 13:32 Subject: [isalist] How to Allow DNS zone transfers to the Internet http://www.ISAserver.org Hi We host our own Internet DNS zone on the ISA 2k4 server. How do I allow queries and zone transfers from the internet.? Is there any built in rule policies.? Or do I follow KB articles 291662 and 292278 which was the way done in ISA2000. Another question.. If I do a clean install of ISA server 2004, by default it has 30 builtin system policy rules and one firewall policy rule. If I then import the configuration file created by the migration wizard from a ISA server 2000, will it over write the existing system policy rules.? Thanks RajiA Email disclaimer: This email and any attachments are confidential. If you are not the intended recipient, do not copy, disclose or use the contents in any way. If you receive this message in error, please let us know by return email and then destroy the message. Environment Bay of Plenty is not responsible for any changes made to this message and/or any attachments after sending. ****************************************************** This e-mail has been checked for viruses and no viruses were detected.