RE: dns
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Sat, 8 Feb 2003 09:42:47 -0600
Hi James,
Tell you what. Check out my article on placing a DNS server on the ISA
Server itself over at www.isaserver.org/shinder and see if that makes
any light bulbs go off :-) Thanks for getting the book! :-)
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: James May [mailto:Jmay@xxxxxxxxxxxxx]
Sent: Friday, February 07, 2003 4:17 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: dns
http://www.ISAserver.org
TCP Port 53 both directions set to only the ip that the dns service is
listening on
UDP port 53 receive send same Setup has stated above. From what've read
zone transfers occur on tcp port 53 UDP is for the queries from the
internet.
FYI the dens service is not listen on the default ip address rather on I
added in the advance properties tab of the tcp/ip properties.
Thanks Jim
PS I know this is a little backwards but I'm now reading through the ISA
Server book I purchased great book! I really like it.
Jim May
Defense Group Inc.
Santa Monica, CA
jmay@xxxxxxxxxxxxx
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Friday, February 07, 2003 1:58 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: dns
http://www.ISAserver.org
Hi James,
What are the exact configurations of your DNS related packet filters?
Thanks!
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: James May [mailto:Jmay@xxxxxxxxxxxxx]
Sent: Friday, February 07, 2003 9:39 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: dns
http://www.ISAserver.org
Hi Tom
Indeed that's exactly what I'm doing, using packet filters.
(ie)67.116.xxx.xxx external nic on isa
secondary dns=168.103.xxx.xxx all primary zones on 67.116.xxx.xxx
transfer fine to 168.103.xxx.xxx
its the primary zone on 168.103.xxx.xxx transferring to 67.116.xxx.xxx
where all the trouble comes into play. Error message indicates some sort
of network problem.
Thanks Jim
-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Thursday, February 06, 2003 4:44 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: dns
http://www.ISAserver.org
Hi Jim,
Use packet filters to support zone transfers to and from the DNS Server
on the ISA Server.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
-----Original Message-----
From: Jim [mailto:jmay@xxxxxxxxxxxxx]
Sent: Thursday, February 06, 2003 2:42 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] dns
http://www.ISAserver.org
Hi
I have a primary dns server running on the external interface for public
name server. I have about 5 zones. All primary zone transfers to the
secondary server work fine, however I have one secondary zone on the isa
server that will not communicate with its primary master which is the
secondary server for all the zones on the isa server. Note the name
server
is not configured to listen on the default address of the external nic,
I
multiple addresses configured on the external side of the server.
Anybody
have any suggestions? Jim
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jmay@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jmay@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
