Advice on using a particular domain name

[Guest]

Hello All

I have a situation, and would like some advice. Are they any security risks, or problems that can occur from having your internal domain name the same as your web hosting name? E.g. if you have a registered domain name called “pilot.com.bbâ€, and this was used to host a website from an external web hosting provider; the website address is “http://www.pilot.com.bbâ€. This website is still live, but it is no longer updated or maintained, and my company has a new web hosting package with another provider. I would like to use the “pilot.com.bb†as our new internal domain name as it is already registered. Any thoughts on security risks, issues, or problems

Best regards

Apri

 

[Matjaz Ladava [MVP]]

There are no issues if you are using the same DNS name for AD domain as
external domain. You will just have to know, that there will be two DNS
server each serving the same DNS domain. One for external and one for
internal (so called split brain DNS configuration). That said, you will have
to manually add A records to your internal DNS server, so that your internal
clients will be able to access www.pilot.com.bba, as it is hosted on
external web server.
The only thing that is dangerous in this kind of configuration is if people
publish their internal DNS server to the internet in order to host their
external domain.

--

Regards

Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory
(e-mail address removed), (e-mail address removed)

 

[Guest]

Hi

Thank you for your response. One thing I do not understand is: why I would have to manually add the A records for my internal clients. The website that uses Http://www.pilot.com.bb is not hosted by us, it is not part of our LAN it was outsourced and is hosted by our ISP.

 

[Matjaz Ladava [MVP]]

because your internal DNS server will be responsible for pilot.com.bb
domain, your clients will query internal DNS server for www.pilot.com.bb .
That said, you will have to manualy create A record for www address pointing
to your external web server. Otherwise your clients will recieve host not
found error.

--

Regards

Matjaz Ladava, MCSA, MCSE, MCT, MVP
Microsoft MVP Windows Server - Active Directory
(e-mail address removed), (e-mail address removed)