forward lookup zone for my domain?

[T.B.]

i have a W2K domain with AD doing internal DNS. My internal domain name
isn't the same as my external domain name. This is how it is currently
setup:
Internal = internal.net
External = domain.com

We have dyndns.org handling our dynamic DNS updates for domain.com.
Everything is working fine right now, i am just curious as to a couple of
things.

1) should my AD DNS have a forward lookup zone for domain.com? right now it
doesn't.

2) when i created a forward lookup zone for domain.com, everything broke.
what did I do wrong?

thanks for any and all help.

TB in austin

 

[Kevin D. Goodknecht Sr. [MVP]]

In T.B. <[email protected]> posted their
concerns
Then Kevin made his reply inline:

i have a W2K domain with AD doing internal DNS. My internal domain
name isn't the same as my external domain name. This is how it is
currently setup:
Internal = internal.net
External = domain.com

We have dyndns.org handling our dynamic DNS updates for domain.com.
Everything is working fine right now, i am just curious as to a
couple of things.

1) should my AD DNS have a forward lookup zone for domain.com? right
now it doesn't.

It depends on if you are hosting web sites and or mail servers locally
behind NAT for you domain.
If you are *not* hosting any servers locally then the answer is, no.

If you are hosting local servers, you cannot access these servers behind NAT
by their public addresses, so you wil have to create the FLZ and a host for
each of your web sites and servers whether they are hosted locally or not.
This is because once you create the FLZ for domain.com it will be the SOA
for the name to all machines on the local network.
So create hosts for www, mail ftp, etc. then assign IP addresses for the
respective server depending on where it is located. So if the servers are
local give them local addresses, if the server is hosted externally give the
host the public IP addresses.

2) when i created a forward lookup zone for domain.com, everything
broke. what did I do wrong?

Refer to the answer above, I think it will come to you