And then you really want 2 of each tier for redundancy.
+__________________________________________+ A fanatic is one who can't change his mind and won't change the subject. Winston Churchill Kevin M. Flanagan C/S Planning Engineer III IT Systems Implementation Branch Banking & Trust 3261 Atlantic Ave Suite 116 Raleigh, NC 27604 919-716-6209 > -----Original Message----- > From: Joe Sargent [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, February 19, 2002 10:31 AM > To: [EMAIL PROTECTED] > Subject: RE: [ActiveDir] DNS Inside and Outside > > > Best practice is two DNS servers. One for your AD and one > for the world. With the correct commands on an AD DNS server > a hacker can get some very useful info. > > I attended a 2 day MS sponsored Active Directory University. > The instructor stressed the importance of not having your AD > DNS where it could easily be queried by the world. > > HTH > Joe S. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Morgan, Joshua > Sent: Tuesday, February 19, 2002 10:04 AM > To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] > Subject: [ActiveDir] DNS Inside and Outside > > > I'm sure this has probably been discussed before but I have > Internal DNS and External DNS. I either need to have External > update Internal or host 2 sets of DNS Servers.... Does > Microsoft have any recommendations for this or would I be > better off just hosting 2 sets? > > Thanks, > Joshua > > > > > > Joshua Morgan > PROFITLAB > Network Engineer > [EMAIL PROTECTED] > > "One is glad to be of service " > --Robin Williams (Bicentennial Man)-- > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > List info : > http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/