Do you think we can have one?

Thanks,

Adrian

True.. Networking would be good....

Agreed on the General section point,

A subject to cover everything from Protocols to Physical Media.

Great Idea!  

Wireless questions or just general networking?

Because i have a good one for anyone that accepts the challenge :)

2003 Server running AD integrated DNS (  AD Zone ends .co.uk ) but your server is also the primary DNS server for your external records as well,
so you can quite happily put A, MX records in for your external hosts.

The problem starts when you do a DNS Lookup against your server from another site,

as it will resolve not only the correct external hosts but also the internal hosts of your network/domain.

Does anyone know a way of hiding internal AD/DNS data from DNS Queries?

Or am i just being daft?
 

I would guess no.  It is working as designed although there are security entries so "maybe" you could go through every record and remove everyone and add authenticated users instead? 

Or maybe (thinking out loud) you could have second.test.co.uk and only assign addresses from that?

Hmm 

Now that security thing was something I hadn't considered, would I be right in thinking that if as u said I remove the "Everyone" security group from each of the internal/ad DNS records that they would not display on an external DNS resolutions say from something like www.dnsstuff.com (another marvelous website a bit like petro.co.il) .

Cheers,

That I don't know.  I was only thinking out loud.  It certainly isn't best practice and you would do well to consider a seperate DNS server in a DMZ if you are doing your own lookups externally.  How many records are we talking?  You could always have your ISP sort the external records and still keep your internal forwarding out to them?

If you remove Everybody from read you would need a way for your internal clients to be able to read so this would probably mean something like auth users maybe.