DNS for exchange

[mbvales]

---

i have stand alone ISA 2006 installed in my environment as firewall, proxy, dhcp & dns functions, all clients are just in workgroup members.

now im setting up 1 additional server for exchange 2003 & domain controller and since i have dns service installed from the ISA 2006 server, is it ok to add 1 more zone for exchange server or i should create separate DNS from the exchange server itself?

what im thinking is to remove the DNS from the ISA and point it all to the exchange server since this is also a domain controller then i will make the ISA as member of the domain?

pls share your thoughts. thanks

[Aeshanjace]

i have stand alone ISA 2006 installed in my environment as firewall, proxy, dhcp & dns functions, all clients are just in workgroup members.

now im setting up 1 additional server for exchange 2003 & domain controller and since i have dns service installed from the ISA 2006 server, is it ok to add 1 more zone for exchange server or i should create separate DNS from the exchange server itself?

what im thinking is to remove the DNS from the ISA and point it all to the exchange server since this is also a domain controller then i will make the ISA as member of the domain?

pls share your thoughts. thanks

Hmmm.. very tough one hehe. will.. you need to have a careful planning on that, it could be affect in firewall issue, or port issue if you have also assign sites in your DNS configuration that would affect also. But better try to create another DNS zone that would assign to your Exchange server, and if every thing seems running, try to observe it in awhile for conflict issue. And if that arise, much better to try another option in having an ACTIVE DOMAIN MODE, coz in there also you can set it as to authorize another domain controller which is Exchange server, which also more capable of migrating in Active Domain. And try to focus your ISA as a standalone firewall as well to configure all gateways you have available. So it could be more effective in securing your connections from outside.

[mbvales]

what i have done is installed DNS separately from exchange server and so far no conflict. However, since all users are DHCP clients and its pointed to ISA DNS they couldn't join the domain not unless if i have to manually configure their IP and point to exchange server DNS.

I think it would be ok but having 2 DNS doesn't make sense if i can able to make it one. Beside once I start to publish my mail behind ISA, im a bit worried if some conflict arise if i can't re-structure my environment 1st.

[Aeshanjace]

what i have done is installed DNS separately from exchange server and so far no conflict. However, since all users are DHCP clients and its pointed to ISA DNS they couldn't join the domain not unless if i have to manually configure their IP and point to exchange server DNS.

I think it would be ok but having 2 DNS doesn't make sense if i can able to make it one. Beside once I start to publish my mail behind ISA, im a bit worried if some conflict arise if i can't re-structure my environment 1st.

Well done brod! It's normal on having more DNS available account, also you can use any of the supported server you want to have pointed DNS in your user's for DHCP, I have suggestion with regards of changing IP in order to have access in Exchange Server. Try to reconfigure all user's station to manually assign the DNS IP of Exchange Server, Since the User station's is capable of having 2 DNS, much better to obtain ip addresses and not to obtain DNS addresses, just manually assign ISA DNS as a Preferred DNS Server (Primary DNS) and for the Exchange Server DNS as a Alternate DNS Server which serve you as (Secondary DNS or Back up DNS) in your User's Station Settings. So that all DNS account will be maximize to all station even if you have different DNS provider service flatform. Just give it a try, if that is unsuccessful you could just return it to your previous settings.

[giancarlo]

I think you can separate the ISA server but still member in AD-, What we do hr at offce we hv two server, SRV 1 = ISA+DHCP you can set ur permssion hr and SRV 2= DNS+AD+ES

[mbvales]

I kept the DNS service running from ISA and I set up another DNS from exchange/DC server itself wherein the exchange DNS pointed it there. And why suddenly I can't received any mails now from outside but can able to send

I joined the ISA in the domain, it is because of the OWA authentication requirement which is fine. With regard to DHCP server I have entered the IP addresses for both DNS so that users would get automatically.

It's been 2 days now figuring out why can't able to receive mails..any help would be greatly appreciated. Thanks

[giancarlo]

Ok already forward the the IP from DNS you finish set-up the routing and remote access f not just install that one

[mbvales]

Hi Thanks but its solved now. Found out that on SMTP default virtual server--access--authentication. Mistakenly unchecked the anonymous access & integrated windows authentication coz' it was changed to basic authentication.

[giancarlo]

good job bro

[mbvales]

thanks bro.

i have few things to clarify bro though my exchange is working & running in a production now but to tell u this is my 1st exchange installation na live.

1.) since we hosted a mail server on site, i have noticed that our Internet connection becomes slow - I have a feelings it is because of the exchange server, we have only 128kbps leased line connection. Am I right that hosting a mail server can affect to your bandwidth?

2.) some users are directly connected to exchange & member of the domain, some are still in workgroup and used POP3 account settings. I have also Outlook Web Access (OWA) enabled as an alternative for any purpose. Now for the users who use laptop and their outlook setting is directly connected to exchange, i don't want them to use another POP3 settings just to pick up their mails especially if they are away or in travel. It gets confusion also from the user point of view having multiple accounts to their outlook. What im planning is to kept their outlook as it is and will do a tunnel setup for them to login and download the mails from our exchange server. But don't know yet the concept on how it works, is this the same as VPN for you to gain an access in a secure tunnel? please advise.