And then you really want 2 of each tier for redundancy.

+__________________________________________+
A fanatic is one who can't change his mind and won't change the subject. 
Winston Churchill


Kevin M. Flanagan
C/S Planning Engineer III
IT Systems Implementation
Branch Banking & Trust
3261 Atlantic Ave Suite 116
Raleigh, NC  27604
919-716-6209

> -----Original Message-----
> From: Joe Sargent [mailto:[EMAIL PROTECTED]] 
> Sent: Tuesday, February 19, 2002 10:31 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] DNS Inside and Outside
> 
> 
> Best practice is two DNS servers.  One for your AD and one 
> for the world. With the correct commands on an AD DNS server 
> a hacker can get some very useful info.
> 
> I attended a 2 day MS sponsored Active Directory University.  
> The instructor stressed the importance of not having your AD 
> DNS where it could easily be queried by the world.
> 
> HTH
> Joe S.
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Morgan, Joshua
> Sent: Tuesday, February 19, 2002 10:04 AM
> To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED]
> Subject: [ActiveDir] DNS Inside and Outside
> 
> 
> I'm sure this has probably been discussed before but I have 
> Internal DNS and External DNS. I either need to have External 
> update Internal or host 2 sets of DNS Servers.... Does 
> Microsoft have any recommendations for this or would I be 
> better off just hosting 2 sets?
> 
> Thanks,
> Joshua
> 
> 
> 
> 
> 
> Joshua Morgan
> PROFITLAB
> Network Engineer
> [EMAIL PROTECTED]
> 
> "One is glad to be of service "
> --Robin Williams (Bicentennial Man)--
> 
> List info   : http://www.activedir.org/mail_list.htm
> List FAQ    : http://www.activedir.org/list_faq.htm
> List archive: 
> http://www.mail-archive.com/activedir%> 40mail.activedir.org/
> 
> 
> List info   : 
> http://www.activedir.org/mail_list.htm
> List FAQ    : http://www.activedir.org/list_faq.htm
> List archive: 
> http://www.mail-archive.com/activedir%> 40mail.activedir.org/
> 
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to