Exchange DNS

[dazz828]

Hi all,

I'm new to the Cisco PIX scene. Just got a Cisco PIX 506e. I managed to install it & get internet connectivity. I noticed there is nowhere on the PIX to enter our T1's DNS servers like we had on our 3Com OfficeConnect firewall. So I had to set the DHCP client to use 10.1.1.15 (our internal DNS server) as the primary, then 204.16.1.x our ISP's DNS as the secondary. That got everyone on the internet.

But our Exchange server still cannot connect. It also runs AD (Win2K server) & Exchange 2000. So it's our primary domain controller. When I change the DNS on it, all email stops and I cannot connect to internet.

Does anyone know how I can get by this? I know Exchange/AD are very tempermental that it wants to point to itself as the DNS server (10.1.1.15), but even if I add our ISP's DNS as the 2nd or 3rd entry still nothing. Can I setup DNS forwarding? Also do I need to open any outbound ports or is that automatic? I opened SMTP/POP3 for incoming. Any help please? Thank you.

Dazz

 

[lgarner]

Set your ISP's DNS servers as "forwarders" on the Windows server. Your server will then resolve it's own domain locally, while querying your ISP for everything else.

The Pix does not use DNS itself. If you're using it as a DHCP server, then see

http://www.siliconvalleyccie.com/cisco-hn/dsl-pix.htm#_Toc50175071.

Basically you use the "dhcpd dns" command to set the DNS servers that Pix will hand out to clients.