RE: Split-DNS, is it really necessary...for me?

From: "John Tolmachoff \(Lists\)" <johnlist@xxxxxxxxxxxxxxxxxxx>
To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
Date: Thu, 29 Jan 2004 16:32:03 -0800
Either there is a misprint or a misunderstanding.

 

On the External, File and Printer sharing should be unchecked as well as
Microsoft networking what ever it is called.

 

On the Internal, those can and should be checked.

 

If the Internet Protocol is unchecked, no communications with the Internet.
:-))

 

John Tolmachoff

Engineer/Consultant/Owner

eServices For You

john@xxxxxxxxxxxxxxxxxxx

626-737-6003

Fax 626-737-6004

www.eservicesforyou.com <http://www.eservicesforyou.com/> 

 

-----Original Message-----
From: Marvin Cummings [mailto:marvc@xxxxxxxxxxxxx] 
Sent: Thursday, January 29, 2004 4:07 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Split-DNS, is it really necessary...for me?

 

http://www.ISAserver.org

Cool. I really appreciate the patience and help on this but I have one more
question that relates to the ISA installation preparation and configuration.
Which of the tutorials listed at the site should I follow? Looking at the
Quick start guide in the interface configuration section it looks like after
moving the south - internal interface to the top I need to uncheck "File and
Printer sharing for .. ." and "Internet Protocol", yet in another tutorial
on configuring the interfaces it states to leave them checked on both the
internal and external interfaces. Which is correct or am I reading this
wrong? 

 

Thanks

 

  _____  

From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] 
Sent: Thursday, January 29, 2004 7:01 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Split-DNS, is it really necessary...for me?

 

http://www.ISAserver.org

The Internal DNS server can point to either ISA, or to your ISP DNS server.
I would prefer to point directly at the ISP server, but by pointing it at
ISA, it adds a little more security.

 

You do not need the DNS service on the web server.

 

John Tolmachoff

Engineer/Consultant/Owner

eServices For You

 

-----Original Message-----
From: Marvin Cummings [mailto:marvc@xxxxxxxxxxxxx] 
Sent: Thursday, January 29, 2004 3:41 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Split-DNS, is it really necessary...for me?

 

http://www.ISAserver.org

Ok and here's where the confusion comes in. I take it that I also point my
internal DNS server to the ISA server and that I DON'T have to configure a
DNS server on my web server when I go to publish it? If not, does it matter
whether the web server sits in a workgroup or on the domain? 

After this I'll scurry to my server and get to work. 

 

Thanks

  _____  

From: John Tolmachoff (Lists) [mailto:johnlist@xxxxxxxxxxxxxxxxxxx] 
Sent: Thursday, January 29, 2004 6:32 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Split-DNS, is it really necessary...for me?

 

http://www.ISAserver.org

Then yes, are you using classic split DNS.

 

The DNS configuration on the ISA server is for CACHE ONLY and only for
internal clients/users going out to the Internet. According to Tom, you will
point your clients at ISA for DNS, which will be configured to send requests
for your internal domain name to your internal DNS server. On your internal
DNS server, you will add a A record of www pointing to the internal IP
address of the web site.

 

Please avoid the use of CNAME records unless absolutely neccassary. They can
come back to bite you when least expected.

 

Publish your web server as normal.

 

John Tolmachoff

Engineer/Consultant/Owner

eServices For You

 

-----Original Message-----
From: Marvin Cummings [mailto:marvc@xxxxxxxxxxxxx] 
Sent: Thursday, January 29, 2004 2:54 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Split-DNS, is it really necessary...for me?

 

http://www.ISAserver.org

It's on the internal network on a separate box. I was wondering whether DNS
would need to be configured on this server separately from the internal DNS?
If so how, if I needed to use split-dns.

 

Thanks

 

 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
marvc@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
johnlist@xxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
marvc@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
johnlist@xxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
RE: Split-DNS, is it really necessary...for me?

Other related posts:
