Setup a DNS Server

  • Thread starter Thread starter Dan
  • Start date Start date
D

Dan

I need to setup a DNS server cause out ISP does not provide one. What i did
so far what install windows 2000 server on a machine and installed DNS. What
are the nexted steps, Also do i need to open any ports of firewall.
 
In
Dan said:
I need to setup a DNS server cause out ISP does not provide one. What
i did so far what install windows 2000 server on a machine and
installed DNS. What are the nexted steps, Also do i need to open any
ports of firewall.
Click to expand...

Is the server for internal usage or are you trying to host your external
domain name for the public, or both?


--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
 
I want it to be external. I have an internal one already. I just want to do
this for a learning experience.
thanks

"Ace Fekay [MVP]"
 
In
Joe said:
I want it to be external. I have an internal one already. I just want
to do this for a learning experience.
thanks
Click to expand...

You'll need to install a separate server to host external data. You can't
mix private and public data.

Once you've installed your "external" server, firewall ports required are:
UDP 53 and TCP 53. Then you'll need to go to the registrar, such as Network
Solutions, and register a "Hostname server". Actually, they require two
servers, if you want to host any public domain names.

For the most part, it's really easier to let your ISP or registrar host your
domain names. It becomes a pain in the butt with their requirements,
especially needing two servers.

Ace
 
You'll need to install a separate server to host external data.
You can't mix private and public data.
Click to expand...

Agreed; the best solution would be putting the public DNS
into a DMZ so that you'll be able to publish it without any
security problem
Once you've installed your "external" server,
firewall ports required are: UDP 53 and TCP 53.
Click to expand...

correct :-) and you may also want to disable recursion if
the DNS is just an authoritative one and won't be used
for "external domains" resolution
Then you'll need to go to the registrar, such as Network Solutions, and
register a "Hostname server". Actually, they require two servers, if you
want to host any public domain names.
Click to expand...

Yes, and if you lack a second public server you may use
this free service http://soa.granitecanyon.com/ to setup your
secondary DNS; in this case you will need to

1) Register your domain (no DNS info given for the moment)

2) Setup your primary (local) DNS; ensure to put all the needed
info into your zone (NS, MX and so on) since it isn't advisable
to change such data until you'll reach point #6 below

3) Authorize ns1 and ns2.granitecanyon.com to
perform zone xfers from your primary DNS (2)

4) Setup the secondary DNS on granitecanyon so that
those DNS will transfer a copy of your zone from your
primary (local) DNS

5) Tell to your domain registrar the IP addresses
of your primary and secondary nameservers

6) Wait for zone data propagation, please be patient
it may take 24hrs or so to complete propagation

at point #5 your registrar will update the NS records
for your domain to point to your DNS addresses, at
point #6 the zone data will be propagated and your
domain will go live on the 'net; if you need to check
for DNS configuration errors/issues, I suggest you
to use this simple yet effective online DNS check
http://www.dnsreport.com/


Ok, that's (almost) all .. am I missing something Ace :-) ??

Regards


--

* ObiWan

Microsoft MVP: Windows Server - Networking
http://www.microsoft.com/communities/MVP/MVP.mspx
http://mvp.support.microsoft.com
 
In
ObiWan said:
correct :-) and you may also want to disable recursion if
the DNS is just an authoritative one and won't be used
for "external domains" resolution
Click to expand...

Good point! :-)
Yes, and if you lack a second public server you may use
this free service http://soa.granitecanyon.com/ to setup your
secondary DNS; in this case you will need to
Click to expand...

I didn't know this place existed. Thanks for posting the link!

Ace
 
Back
Top