W2K DNS Configuration Advice 1

[niallw]

Dear Members

We have recently upgraded to ADSL internet access, and installed a firewall etc. Everything works fine but I want to check that I have configured DNS correctly...
We use DHCP to assign addresses, and I have added a scope option for DNS servers to include the range specified by our ISP. I have not included the local DNS server on our LAN within this list.
Is this correct, our should I tweak the DNS server (W2K) to somehow forward DNS queries to the ISP DNS servers - and set DHCP to only issue the local DNS address?. The properties for the DNS server do not allow forwarding as it is a "Root Server"???
Any tips, advice or suggestions most welcome.

 

[snootalope]

From My Experience

Setting the DNS to be local may create a bottleneck when they are all trying to access the interent. ** What I would do is set the Default Gateway to the firewalls internall address and DNS to your ISP's (primary) and your local (secondary). And on the server of course set DNS to be your IPS's DNS..

You might want to edit the hosts file on the server, if your in a SOHO..

That's what I would I do! "tis better to be thought of as a fool then open your mouth and remove all doubt" Mark Twain

"I should of been a doctor.." Me

 

[ashpp]

Niallw,

I would advise against the advice on snootalope, the clients should only include the addresses of internet DNS servers.
What you have done is correct and yes you should get your DNS server to forward to the ISPs DNS server.
(Right click the DNS servers name in the MMC, select properties choose forwarding and enter the address)

If you option is grayed out - go into the FLZ and delete the . record (you can create this again later). If should now allow you to forward.

HTH

Ash.

 

[ashpp]

Typo alert!

"I would advise against the advice on snootalope, the clients should only include the addresses of internet DNS servers."

should read

"I would advise against the advice on snootalope, the clients should only include the addresses of INTERNAL DNS servers."

Ash.

 

[snootalope]

Ash,
Now that I read my statement again, I some what agree. Still, if it were me, and my network, I wouldn't bother with the server, I'd send it all right out the firewall and let the ISP take care of it! "tis better to be thought of as a fool then open your mouth and remove all doubt" Mark Twain

"I should of been a doctor.." Me

 

[Titleist]

snootalope,

If I followed your advice how would my desktops resolve any internal IP's without resorting to WINS and host files(this is Win2000 not 9x)..AshleyPride is right..point all internal clients to your internal DNS and forward outbound request to your ISP..