I have Active directory and DNS setup on 2 servers, basically a PDC and a BDC
Win2k3. Both of these servers are on the inside of my firewall.

I setup these DNS servers to forward unknown requests to my ISP DNS Server.

Would it be better for me to setup another DNS Server on the outside of my
firewall to forward to the ISP server and setting my internal DNS Servers to
forward requests to the outside DNS Server or what is the best solution for
Speed and security?

Any would be great.

--
Message posted via http://www.winserverkb.com

Hi
>I have Active directory and DNS setup on 2 servers, basically a PDC and a
>BDC
> Win2k3. Both of these servers are on the inside of my firewall.
There are no BDC concept in AD. All DCs are peers.

> I setup these DNS servers to forward unknown requests to my ISP DNS
> Server.
Ok.

> Would it be better for me to setup another DNS Server on the outside of my
> firewall to forward to the ISP server and setting my internal DNS Servers
> to
> forward requests to the outside DNS Server or what is the best solution
> for
> Speed and security?
Yes you can setup a cache only server in DMZ. From security prespective
sounds good.
The best solution to security would be no to have internet connection, but
you need it correct? So your plan sounds good.


--
I hope that the information above s you

Good Luck
Jorge Silva
MCSA
Systems Administrator

"cisconoobie via WinServerKB.com" <u26219@uwe> wrote in message
news:661ab985ad193@uwe...
>I have Active directory and DNS setup on 2 servers, basically a PDC and a
>BDC
> Win2k3. Both of these servers are on the inside of my firewall.
>
> I setup these DNS servers to forward unknown requests to my ISP DNS
> Server.
>
> Would it be better for me to setup another DNS Server on the outside of my
> firewall to forward to the ISP server and setting my internal DNS Servers
> to
> forward requests to the outside DNS Server or what is the best solution
> for
> Speed and security?
>
> Any would be great.
>
> --
> Message posted via http://www.winserverkb.com
>