"pbd22" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed) ups.com...
>> **NOTE**
>> All of this is only relevant on your local LAN. It has nothig to do with
>> the
>> Public Internet or having people on the Internet get to your Servers
> Would you mind elaborating on the last point, the "NOTE".
> I am building with the intention of having Internet traffic
> get to my video server.
In that case you need to create a second Zone in your DNS that matches your
Public Domain. For example your AD Domain Name may be "MyLan.loc" and the
Public Domain might be "MyCompany.com". Your AD/DNS will already have one
for your "MyLan.loc" so you will only have to create the other zone. It
will be just a regular normal new Zone,..nothing special about that.
Then in that new public Zone you would add the records for your public
Hosts. These would be the same hosts names that your ISP has registered in
their DNS,..the only difference is that you would point them to either the
internal LAN IP#s or the internal AD Host Records that exist in your
original AD Zone,...while your ISP would be pointing the same name at the
public IP# that the internet user would be comming in at. In the event that
you have a machine that litterally does use a Public IP# then that DNS entry
would be the same in your new zone as it would be on the ISP's.
Any IP# will work in a Zone,..the Zone doesn't care,...the main focus of the
Zones are the hosts names. The Records only care about the host portion
(www, video, mail),...the rest of the name is always assumed to match the
Zone Name (MyCompany.com, MyLan.loc) So if the Zone is "MyCompany.com" and
the Record is "www" the machine is assumed to be
www.MyCompany.com
The purpose of doing all this is because your internal LAN users are *not*
supposed to try to make a "U-turn" through the Firewall to get to a resource
that already physically sits on the LAN,..they are supposed to go directly
to the Resource itself.
Public User --> video.MyCompany.com = <the Public IP#>
LAN User-----> video.MyCompany.com = <LAN IP# or LAN Host>
This does mean that all machines on the LAN (*all*) are to use only your
AD/DNS for their DNS and *nothing* else. Your Ad/DNS would then have the
ISP's DNS listed in the Forwarders List in the Config of the DNS Service
itself. The Firewall would need to allow your Ad/DNS to make outbound DNS
queries to the ISP's DNS.
Then finally, you have the ability to run multiple websites from the same
IP# and Port# if you use host headers. So you have use only one LAN IP# on
the Web Server and only one Public IP# on the outside. The ISP would point
www, video, mail, ect to the same IP#. In your AD/DNS your would point the
www, video, mail, ect, in the New zone to the same Host Record in your AD
Zone (MyLan.loc). You would do this with CNAME (Alias) Records.
If the web server on the LAN was "myserver.mylan.loc" .....then
ISP's DNS:
www = <public IP>
video = <same public IP>
Your AD/DNS (MyLan.loc Zone)
myserver.mylan.loc = 192.168.14.65 (Host [A] Record entry)
Your AD/DNS (Mycompany.com Zone):
www = myserver.mylan.loc (a CNAME entry)
video = myserver.mylan.loc (a CNAME entry)
HostHeaders in IIS:
www.mycompany.com = site with "wwwroot"
video.mycompany.com = site with "videoroot"
--
Phillip Windell
www.wandtv.com
The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------