Lost and confused with DNS server and registration setup.

[rayen99]

I feel really stupid asking this, but I've been reading posts and articles on the net all morning and I'm still totally confused on how to set up DNS at my office. Here's the situation:

I've got a static IP on a T1 (lets pretend it's 1.1.1.1), and I want to run mail,ftp,

http://www etc

from my DMZ which is a vlan on my router. The DMZ subnet is 192.168.4.x and is completely isolated, as all DMZ's should be, from my LAN. I have 2 computers on the vlan 1) Win2000 mail/dns server and 2) FreeBSD

http://www/ftp

server. I set port forwarding on the router to foward in 53 to my win2000 box for DNS, and 80 for the www, etc. Now I can't even get to the point of testing out my nameserver from the outside, because (here's where I'm confused the most) I don't know how to update my registrar's information to point to my nameserver. At first I tried putting in my IP 1.1.1.1 but it refuses addresses. So then I queried rDNS lookup for my ip and it came back with a name, however when I use DNS lookup on the name rDNS gave me it doesn't resolve. So how in the world am I to set my registrar to point to my nameservers for my domain if my IP doesn't even have a name? I saw some posts mention getting registered with your ISP. So I request a name from my ISP? I don't understand it. Will they charge me?
Also, once I do have it all set up, I forsee serious problems... Lets say someone tries to connect to my webserver - (domain is bar.com) so they type in

http://www.bar.com,

and it queries my name server, won't my nameserver return 192.168.4.x for the

http://www server's

address? That's not going to work too well... Or even if I get it to return 1.1.1.1 for the address there's a problem then since my mail server runs a web based mail program. I would like to just type

http://mail.bar.com

and have it go to my mail webpage and

http://www.bar.com

go to my normal webpage. Instead of doing something cheesy like mail.bar.com:8080 and then port forwarding 8080 into the mail server. But if the DNS server returns 1.1.1.1 for all queries I don't see how to do it differently. I'm so lost on this and I need to get everything working very very soon. If anyone can help please do, I will be overjoyed.

-----Chris

 

[neutec]

I have a very similar setup. My mail and

http://www are

sitting behind a firewall/router. My mail and

http://www servers

have an ip address of 192.168.100.200. My Router has an ip of 66.146.215.180. I have forward all DNS,

http://WWW and

Mail request(i.e port 53, 80 and so on) to my internal servers. So when I wanted to register my DNS name server with internic I needed to use my outside routable ip 66.146.170.180. This way when someone tries to resolve mydomain.com the request is sent to my router which forwards it to my internal server. I suggest having a external DNS server in the DMZ and a internal for more security. You dont want your internal DNS records veiwed by the outside world. If you can get an additional IP address you should set up another DNS server that can be seen from the internet. That would be a much easier setup I think.

 

[wbg34]

First things first you make up the hostname for your dns server. The registrar info should be a dns server name and address. For your case use ns.bar.com and use ip address 1.1.1.1. That will tell the root servers to look at ip address 1.1.1.1 for dns info on your domain (it will take one or two days for the info to get to the root servers).

Once that is set up you need to set up your dns use your external ip address (1.1.1.1) for your

http://www and

mail host records. You will also need a host entry for ns.bar.com that points to 1.1.1.1. You will need to set up forwarding on your router so that it forwards port 80 to your webserver's internal ip and ports 25 and 110 to your mail server's internal ip.

 

[rayen99]

Hey thanks a ton for your help, both of you. I got it working everything seems to be fine for now. What was totally tripping me up was the fact that I had to create a nameserver record with netsol before being able to make everything work. Before I was trying to just enter my host as the nameserver. Anyway it's working and thanks again for your posts.