Configuring DNS for LAN Internet Access

[Rich]

Archived from groups: microsoft.public.win2000.dns (More info?)

Hello all,

I am trying to get everything configured on my home network now that I have
DSL. My setup is as follows:

1 Win2K Server: AD/DNS/DHCP/WINS. This is also my LAN file server. This
is the domain controller.

2. A couple WINXP clients. DHCP clients. both are domain members.

3. A 2nd Win2K server configured with RRAS, 2 NICs. This server has the
external NIC connected directly to the DSL router. This NIC gets an IP
config from the DSL router. 192.168.1.z. The internal NIC has a static IP
address. Internal network is 200.200.200.0. I can obviously change this if
something else is better.

4. The DSL router is always 192.168.1.254. Config'ed via browser. Has
firewall services.

I want all my network clients to route through RRAS server (into the
internal NIC) then out the external NIC directly to the DSL router, then
directly to the Internet.

KB article 260362 (Q260362) says "External DNS queries to the Internet do
not work if a root zone entry exists on the DNS Server. To resolve this
issue, remove the root zone entry. I have removed this entry. Now, how do
a set DSN to forward queries to the IP of the DSL router? Please, point me
to step-by-step instructions.

TIA,
Rich

 

[Guest]

Archived from groups: microsoft.public.win2000.dns (More info?)

In news:%23sBH0EwCFHA.3824@TK2MSFTNGP10.phx.gbl,
Rich <rstringer@provide.net> commented
Then Kevin replied below:
> Hello all,
>
> I am trying to get everything configured on my home
> network now that I have DSL. My setup is as follows:
>
> 1 Win2K Server: AD/DNS/DHCP/WINS. This is also my LAN
> file server. This is the domain controller.
>
> 2. A couple WINXP clients. DHCP clients. both are
> domain members.
>
> 3. A 2nd Win2K server configured with RRAS, 2 NICs.
> This server has the external NIC connected directly to
> the DSL router. This NIC gets an IP config from the DSL
> router. 192.168.1.z. The internal NIC has a static IP
> address. Internal network is 200.200.200.0. I can
> obviously change this if something else is better.

You will need to the IP addresses are public and belong to someone else. If
the router is 192.168.1.x then you can use 192.168.0.x.
http://www.dnsstuff.com/tools/whois.ch?ip=200.200.200.0

If you really want to lock this down install ISA on the DC and it will make
it next to impossible to hack in. If a hacker gets past the router they will
hit ISA.


--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================