External IP Entries in Internal Windows 2000 Server DNS

[Rick Lores]

Hello,

We have an internal Windows 2000 DNS Server setup
providing ip resolution. Recently, I noticed that in our
DNS server there are 2 A Records with external (routable)
IP addresses (64.x.x.x) associated with them. I know our
external DNS ip starts with 198.x.x.x

Can someone tell me if my server has somehow been
compromised or is this normal?

thanks

Rick Lores

 

[Roland Hall]

in message
: We have an internal Windows 2000 DNS Server setup
: providing ip resolution. Recently, I noticed that in our
: DNS server there are 2 A Records with external (routable)
: IP addresses (64.x.x.x) associated with them. I know our
: external DNS ip starts with 198.x.x.x

198.x.x.x or 192.168.x.x?

: Can someone tell me if my server has somehow been
: compromised or is this normal?

If your internal domain is the same as your external domain, and your mail
and web server are hosted, then public addresses for www and mail would be
needed for internal users to reach these servers. You omitted what the host
name was for these external records. There could also be other reasons...

--
Roland Hall
/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/servicedesks/technet/default.asp?fr=0&sd=tech
How-to: Windows 2000 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308201
FAQ W2K/2K3 DNS:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;291382

 

[Larry Stotler]

Hello,

Another reason we see alot for incorrect IP's is multihomed servers and
workstations or that have multiple IPs bound to them. These will try to
register also in DNS.

If you do need a multihomed workstation or server, you can follow this
article to stop Dynamic DNS registration;
246804 How to enable or disable dynamic DNS registrations in Windows 2000
and
http://support.microsoft.com/?id=246804


Larry Stotler, MCSE
Microsoft Product Support

NOTE: Please reply to the newsgroup and not directly to me. This allows
others to add to and benefit from these threads and also helps to ensure a
more timely response. Thank you!

This posting is provided "AS IS" without warranty either expressed or
implied, including, but not limited to, the implied warranties of
merchantability or fitness for a particular purpose