external DNS settings

[Deric]

I am running a Windows 2000 network with about 200
users. It has two DNS servers (with IP addresses
10.1.1.50 and 10.1.1.51) hosting our internal domain
name. I would like to setup a new DNS server to host our
external domain name. Upper management decides that we
should host our own external DNS server instead of by our
ISP. Anyway, the two domain names are different. This
new external DNS server will have a static private IP
address (10.1.1.65), which is NATed by Firewall to a
public IP address. My question is what "Preferred DNS
Server" and "Alternative DNS Server" should I assign to
this new external DNS server? Should I use the internal
DNS servers' IP addresses or not? Thanks in advance for
any help.

 

[Kevin D. Goodknecht Sr. [MVP]]

In

I am running a Windows 2000 network with about 200
users. It has two DNS servers (with IP addresses
10.1.1.50 and 10.1.1.51) hosting our internal domain
name. I would like to setup a new DNS server to host our
external domain name. Upper management decides that we
should host our own external DNS server instead of by our
ISP. Anyway, the two domain names are different. This
new external DNS server will have a static private IP
address (10.1.1.65), which is NATed by Firewall to a
public IP address. My question is what "Preferred DNS
Server" and "Alternative DNS Server" should I assign to
this new external DNS server? Should I use the internal
DNS servers' IP addresses or not? Thanks in advance for
any help.

In TCP/IP properties point this machine to the internal DNS servers or it
will not have access to any internal resources.

 

[Jonathan de Boyne Pollard]

D> My question is what "Preferred DNS Server" and
D> "Alternative DNS Server" should I assign to this
D> new external DNS server?

That depends from the answer to the question: Which view of the DNS namespace
do you want programs running on that machine to see: the "internal" view or
the "external" view ?

If you want them to see the "internal" view, configure the DNS Client to talk
to your internal DNS servers.

If you want them to see the "external" view, configure the DNS Client to talk
to your ISP's proxy DNS servers (assuming that you've done the sensible thing
and disabled recursion on that DNS server itself so that you don't provide
promiscuous proxy DNS service to the world).