Do you think we can have one?

Thanks,

Adrian

Maybe something more general like connections?

---

cheers
Andy

I was going to suggest a network section?

---

Geek - a computer expert or enthusiast (a term of pride as self-reference, but often considered offensive when used by outsiders.)

True.. Networking would be good....

 

Agreed on the General section point,

A subject to cover everything from Protocols to Physical Media.

Great Idea!  

Maybe if we had a few questions posted first to show interest?

---

cheers
Andy

Wireless questions or just general networking?

Because i have a good one for anyone that accepts the challenge :)

2003 Server running AD integrated DNS (  AD Zone ends .co.uk ) but your server is also the primary DNS server for your external records as well,
so you can quite happily put A, MX records in for your external hosts.

The problem starts when you do a DNS Lookup against your server from another site,

as it will resolve not only the correct external hosts but also the internal hosts of your network/domain.

Does anyone know a way of hiding internal AD/DNS data from DNS Queries?

Or am i just being daft?
 

I would guess no.  It is working as designed although there are security entries so "maybe" you could go through every record and remove everyone and add authenticated users instead? 

Or maybe (thinking out loud) you could have second.test.co.uk and only assign addresses from that?

 

Hmm 

---

cheers
Andy

Now that security thing was something I hadn't considered, would I be right in thinking that if as u said I remove the "Everyone" security group from each of the internal/ad DNS records that they would not display on an external DNS resolutions say from something like www.dnsstuff.com (another marvelous website a bit like petro.co.il) .

Cheers,

That I don't know.  I was only thinking out loud.  It certainly isn't best practice and you would do well to consider a seperate DNS server in a DMZ if you are doing your own lookups externally.  How many records are we talking?  You could always have your ISP sort the external records and still keep your internal forwarding out to them?

 

If you remove Everybody from read you would need a way for your internal clients to be able to read so this would probably mean something like auth users maybe. 

---

cheers
Andy

yeah you are best of, depending on your oganisation, to have your ISP do the external DNS, clears up a whole host of issues.

Ahh thanks guys, couple of interesting ideas and solutions there, and it was around 10 records in total andy.

Thanks,