Re: Stupid DNS question...

2008-10-10 Thread Kurt Buff
entialExchange.com/blogs/michael > Link with me at: http://www.linkedin.com/in/theessentialexchange > > > -Original Message- > From: Kurt Buff [mailto:[EMAIL PROTECTED] > Sent: Thursday, October 09, 2008 7:46 PM > To: NT System Admin Issues > Subject: Re: Stupid DNS qu

Re: Stupid DNS question...

2008-10-10 Thread Kurt Buff
Sent: Friday, 10 October 2008 3:10 PM >> To: NT System Admin Issues >> Subject: RE: Stupid DNS question... >> >> I thought the OP was asking about INTERNALLY. I don't think that ISA is a >> solution there >> >> Regards, >> >> Michael B.

RE: Stupid DNS question...

2008-10-09 Thread Greg Mulholland
o: NT System Admin Issues Subject: RE: Stupid DNS question... Um - that just sets the user's proxy server configuration. The problem here is DNS resolution... Either the proxy server needs to use different DNS servers, or where the internal DNS record resolves to (DCs) needs to host a pr

RE: Stupid DNS question...

2008-10-09 Thread Ken Schaefer
[EMAIL PROTECTED] > Sent: Friday, 10 October 2008 3:38 PM > To: NT System Admin Issues > Subject: RE: Stupid DNS question... > > I completely concur. ISA is not my specialty (nowhere close), but I don't > see how ISA can resolve that on the internal DCs.. > > IIS or some

RE: Stupid DNS question...

2008-10-09 Thread Michael B. Smith
P My blog: http://TheEssentialExchange.com/blogs/michael Link with me at: http://www.linkedin.com/in/theessentialexchange -Original Message- From: Ken Schaefer [mailto:[EMAIL PROTECTED] Sent: Friday, October 10, 2008 12:23 AM To: NT System Admin Issues Subject: RE: Stupid DNS question... I got the impr

RE: Stupid DNS question...

2008-10-09 Thread Ken Schaefer
From: Greg Mulholland [mailto:[EMAIL PROTECTED] > Sent: Friday, 10 October 2008 3:28 PM > To: NT System Admin Issues > Subject: RE: Stupid DNS question... > > Thats the way i took it. actually a wpad script could probably do this in ISA > or a simple proxy.pac if you had some othe

RE: Stupid DNS question...

2008-10-09 Thread Greg Mulholland
Sent: Friday, 10 October 2008 3:22 PM To: NT System Admin Issues Subject: RE: Stupid DNS question... I got the impression that the boss wanted internal users that type in http://company.com to be taken to their externally hosted website, just like if they typed that into a browser when outsid

RE: Stupid DNS question...

2008-10-09 Thread Ken Schaefer
[EMAIL PROTECTED] > Sent: Friday, 10 October 2008 3:10 PM > To: NT System Admin Issues > Subject: RE: Stupid DNS question... > > I thought the OP was asking about INTERNALLY. I don't think that ISA is a > solution there > > Regards, > > Michael B. Smith, MCITP

RE: Stupid DNS question...

2008-10-09 Thread Greg Mulholland
and on a DC too.. starting to sound like an sbs setup :) *duck* From: Michael B. Smith [EMAIL PROTECTED] Sent: Friday, 10 October 2008 3:10 PM To: NT System Admin Issues Subject: RE: Stupid DNS question... I thought the OP was asking about INTERNALLY. I

RE: Stupid DNS question...

2008-10-09 Thread Michael B. Smith
ssage- From: Ken Schaefer [mailto:[EMAIL PROTECTED] Sent: Friday, October 10, 2008 12:07 AM To: NT System Admin Issues Subject: RE: Stupid DNS question... Well, Microsoft does make something called ISA Server :-) But there are some much lighter-weight options. Cheers Ken > -Original

RE: Stupid DNS question...

2008-10-09 Thread Ken Schaefer
tp://www.linkedin.com/in/theessentialexchange > > > -Original Message- > From: Ken Schaefer [mailto:[EMAIL PROTECTED] > Sent: Thursday, October 09, 2008 11:11 PM > To: NT System Admin Issues > Subject: RE: Stupid DNS question... > > You could put a proxy on your DCs - no

RE: Stupid DNS question...

2008-10-09 Thread Michael B. Smith
Schaefer [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2008 11:11 PM To: NT System Admin Issues Subject: RE: Stupid DNS question... You could put a proxy on your DCs - no need for IIS specifically. Cheers Ken > -Original Message- > From: Michael B. Smith [mailto:[EMAIL PRO

RE: Stupid DNS question...

2008-10-09 Thread Ken Schaefer
You could put a proxy on your DCs - no need for IIS specifically. Cheers Ken > -Original Message- > From: Michael B. Smith [mailto:[EMAIL PROTECTED] > Sent: Friday, 10 October 2008 2:07 PM > To: NT System Admin Issues > Subject: RE: Stupid DNS question... > >

RE: Stupid DNS question...

2008-10-09 Thread Michael B. Smith
CSE/Exchange MVP My blog: http://TheEssentialExchange.com/blogs/michael Link with me at: http://www.linkedin.com/in/theessentialexchange -Original Message- From: Kurt Buff [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2008 7:46 PM To: NT System Admin Issues Subject: Re: Stupid DNS question... BTW - I

Re: Stupid DNS question...

2008-10-09 Thread Durf
I don't think it can be done without mucking up your Active Directory resolution. Drop out to NSLOOKUP and type 'mycompany.com' - you should get a list of your DC's. If that's resolving to an external web host instead - it will break things. That's why there are those SRV records in DNS that rea

RE: Stupid DNS question...

2008-10-09 Thread Greg Mulholland
Sounds like a bad practise to allow internal web requests to be forwarded out to the net unless you have a good reason to do so. From: Kurt Buff [EMAIL PROTECTED] Sent: Friday, 10 October 2008 10:44 AM To: NT System Admin Issues Subject: Re: Stupid DNS

Re: Stupid DNS question...

2008-10-09 Thread Kurt Buff
Yup - the same, inside and out. On Thu, Oct 9, 2008 at 5:06 PM, Rick Berry <[EMAIL PROTECTED]> wrote: > Is it the exact same domain name inside and out? (mycompany.com is your AD > domain AND your public domain, as opposed to mycompany.local vs. > mycompany.com) > > I *think* if they're the sam

RE: Stupid DNS question...

2008-10-09 Thread Rick Berry
Is it the exact same domain name inside and out? (mycompany.com is your AD domain AND your public domain, as opposed to mycompany.local vs. mycompany.com) I *think* if they're the same you're unable to do it. -Original Message- From: Kurt Buff [mailto:[EMAIL PROTECTED] Sent: Thursday, O

Re: Stupid DNS question...

2008-10-09 Thread Kurt Buff
BTW - I'm fine if the answer is "can't be done without installing IIS" - 'cause then I can tell them it's not worth it for security reasons, and be done with it. On Thu, Oct 9, 2008 at 4:18 PM, Michael B. Smith <[EMAIL PROTECTED]> wrote: > Do you have IIS installed on your domain controllers? > >

Re: Stupid DNS question...

2008-10-09 Thread Kurt Buff
It resolves to the IP address of my main DC - the FSMO role holder. On Thu, Oct 9, 2008 at 4:33 PM, Ken Schaefer <[EMAIL PROTECTED]> wrote: > What does ping mycompany.com resolve to? > > Cheers > Ken > >> -Original Message- >> From: Kurt Buff [mailto:[EMAIL PROTECTED] >> Sent: Friday, 10 O

RE: Stupid DNS question...

2008-10-09 Thread Sam Cayze
You have to create a new zone, and then a blank A record, not just an A record... I think. Not a DNS expert by any means... But I just did something very similar. -Original Message- From: Kurt Buff [mailto:[EMAIL PROTECTED] Sent: Thursday, October 09, 2008 6:05 PM To: NT System Admin I

RE: Stupid DNS question...

2008-10-09 Thread Ken Schaefer
What does ping mycompany.com resolve to? Cheers Ken > -Original Message- > From: Kurt Buff [mailto:[EMAIL PROTECTED] > Sent: Friday, 10 October 2008 10:05 AM > To: NT System Admin Issues > Subject: Stupid DNS question... > > My DNS skills are weak... > > We run a split brain DNS - ISP tak

Re: Stupid DNS question...

2008-10-09 Thread Kurt Buff
Not on your life... On Thu, Oct 9, 2008 at 4:18 PM, Michael B. Smith <[EMAIL PROTECTED]> wrote: > Do you have IIS installed on your domain controllers? > > Regards, > > Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP > My blog: http://TheEssentialExchange.com/blogs/michael > Link with me at: http

RE: Stupid DNS question...

2008-10-09 Thread Michael B. Smith
Do you have IIS installed on your domain controllers? Regards, Michael B. Smith, MCITP:SA,EMA/MCSE/Exchange MVP My blog: http://TheEssentialExchange.com/blogs/michael Link with me at: http://www.linkedin.com/in/theessentialexchange -Original Message- From: Kurt Buff [mailto:[EMAIL PROTE