Dynamic IP from ISP questions

[Ben79]

Hi

I have one server (SBS 2003) which runs Exchange, DNS, DHCP and AD.
I have one server that runs ISA 2004 which have two NIC:s.
My ISP (ADSL) don't use PPOE only DHCP.
I have now an D-Link 804HV router connected to the adsl-modem which is our only protection.

Now the questions:
1. Can I use my ISA server to connect directly to the modem and get dynamic ip from our isp?
Or should I use the D-Link 804HV and use the DMZ function and point the DMZ to the ISA server, and set ISA to connect via the router to internet?

2. I want to publish the Exchange server as well as publishing one more server running Win2k as an FTP dropbox. With my ISP and all my stuff on my network can I use DynDNS to point to my dynamic ip for my published servers?

3. Should I use ISA as DHCP/DNS server for our network instead of the SBS server?

4. Can the ISA server be a member of my domain or is that insecure? Since I can't use a perimiter network anyway that question might be overkill?

5. Under the current setup does any of you guys/gals have any suggestions to make the network more secure and easy to manage, as well as making my life easier?

Cheers Ben

 

[coco10]

hi,

for the 1 question i recommend use the router to connect to adsl and use the isa as edge firewall not dmz

2)if you use the router to connect adls,there you set the dyndns in the router and create a port mapping for the 25 and 110 port to the external ip of the isa. And in the isa publish the exchange server.

3)put the isa as a backup DNS but not the main.

4)the isa can be a member. its not insecure

5)isa its quite simple to configure, i recommend you again use the router to connect and for dyndns there you have a less problems

hope its helps
coco10

 

[Ben79]

Thank you for your time and answers