What's the best way to setup DNS in W2K?

[bartibog]

We have 1 forest, 1 domain...

2 W2K AD servers
1 members with exchange 2000

What is the best way to setup DNS? Do I use my internal DNS on the internet? or do I use my ISP's DNS?

P.S. would like tight security!
Thanks for any reply's!

 

[hewissa]

I would create an internal DNS with forwarders to your ISP DNS. All inhouse resolution would be done on the internal DNS and the external requests sent to the External DNS. Keep the internal DNS behind your firewall. If you create an internal DNS, you can then implament Active Directory and in turn use AD-Integrated zones to increase security.

Hewissa

MCSE, CCNA, CIW

 

[bartibog]

Thanks hewissa for your reply!

I was thinking about going the "forwarder" way... going this way, is there anything from my network being broadcasted on the internet?

Thanks

 

[hewissa]

Na, in doing this, and staying behind the firewall, nothing is being "broadcasted" (not really the correct turm to use...but). It would only be the DNS querying the External DNS server then relaying back to the client. Provided your clients don't have the external DNS listed as possible DNS servers...

Hewissa

MCSE, CCNA, CIW

 

[bartibog]

Sounds good to me...so I will setup all the clients to point to the internal DNS and setup forwarding...Thanks for your help!