DNS Resolution in a DMZ

[Dave Turner]

I'm trying to join a server to a domain from a NATd subnet in a DMZ. However
because of the NAT the DNS lookup is resolving to the real IP address of the
DC's when looking for SRV records. Has anyone got a work around for this
that does not require RRAS or ISA Server?
Thanks
Dave

 

[Phillip Windell]

I already answered this in another group. Many of these groups have the same
people answering the questions so you don't need to post in a lot of
multiple groups. You also should cross-post instead of posting identical
separate posts so that a single reply from any group will show up in all the
groups and cause less confusion.

 

[Jeff Cochran]

I'm trying to join a server to a domain from a NATd subnet in a DMZ. However
because of the NAT the DNS lookup is resolving to the real IP address of the
DC's when looking for SRV records. Has anyone got a work around for this
that does not require RRAS or ISA Server?

Not sure what your issue really is. If you need name resolution
different on your DMZ, then you need to use a different DNS or Hosts
file, which is problematic if you're trying to join a domain. The
address should resolve to the actual IP of the server and a route be
available to reach that server through the firewall, despite address
translation.

Jeff