DNS config question

[ITAMike]

All users use our internal W2K DNS server. I am trying to block users from certain areas of certain web sites. e.g. Allow access to

http://www.company.com

but deny access to xxx.domain.com

I created a New Domain (company.com) in the forward lookup zone for this server. I then created a New Host in the domain company.com with name=xxx and IP of 127.0.0.1 thinking this would not allow anyone to resolve xxx.company.com

Problem is I can no longer resolve (browse to)

http://www.company.com

and can not send email to users@company.com

Any help would be appreciated.

Mike

 

[mgooder]

Since this is an internal website, you can set permissions on the folder in which the website resides only allowing those users or groups whom you want to have access.

 

[ITAMike]

I apologize for the lack of clarity. company.com in this example is an external web site, and has nothing to do with our company. Let's say our internal domain is internal.com and we are trying to block access to an external system xxx.company.com but allow browsing to

http://www.company.com

Thanks,
MIke

 

[mgooder]

Unfortunately, Microsoft does not have a great solution for controlling website access. You can purchase internet filtering software or use ACLs on your router or firewall to the outside to control access to certain websites.

 

[Serbtastic]

By creating the zone company.com on your internal DNS server, you've essentially made your DNS server authoritative for this zone. In doing so, you will need to add records for www, mail etc. in order for your clients to be able to access it.

You could block requests to xxx.company.com on your firewall instead.

 

[ITAMike]

Perfect answers, thanks guys.