SBS 2003 Standard, 2 NICs, .local and .com domains, and email problems

Posted on 2006-10-31
Last Modified: 2010-04-19
I am somewhat of a newbie when it comes to setting up DNS entries and configuring Exchange, so please bear with me.

Here is my current setup:

Public IP (static) -> DSL Modem/Router -> NIC 1 ( -> SBS (DHCP, DNS, Exchange, IIS) -> NIC 2 ( -> local network

I am able to connect to the net with no problem as well as connecting to the internal website (companyweb).

My domain name ( is hosted with GoDaddy and I think I have those DNS records set up properly to point to my public IP address. Here is what they look like:

 A (Host)        
Host      Points To         TTL
@   3600
mail   3600

CNAMES (Aliases)             
Host      Points To      TTL
www       @               3600
ftp           @               3600

MX (Mail Exchange)             
Priority      Host      Goes To                TTL
0                 mail    3600

On the Exchange side of things I have this so far:

Server Mgmt -> Advanced Mgmt -> First Organization -> Recipient Policies -> Default Policy -> Properties -> Email Addresses -> (default)

My DNS only has the .local forward lookup zone so far. I need help configuring the rest of it.

If anything else is needed, let me know.

Now, here is what I'm trying to accomplish.

Keep the server as a Gateway, be able to send/receive mail on this box for, have the xyz.local and domains accessible from the internal side and have available to the outside, and be able to connect to the Exchange server from both sides with Macs and PCs.

I have figured out how to connect the Macs to folder shares using SMB, so no problems there.

I would like to keep the set up the way it is with 2 NICs (I guess I just like the physical seperation).

Question by:indy1979
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17847095
Your setup is quite normal, except that you should really NOT host a public website ( on your SBS.  This is truly a major security risk, and if you want to host your own site it's suggested that you do so on a separate server in a DMZ.  However, I'd suggest that you host it in a major hosting facility such as GoDaddy or any other of your choice. don't configure DNS manually with an SBS.

You should ONLY use the Configure Email and Internet Connection Wizard (CEICW -- which is linked as Connect to the Internet in the Server Management Console > Internet and Email)

A visual how-to is here: and a full networking overview for SBS is at

Within that wizard you'll see a "more information" button on each screen that has invaluable help in deciding which options to select.  Be sure to check those out as well.


Author Comment

ID: 17852215
Ok, so let's take the external web site out of the picture.

I'm still having trouble with exchange. It is not receiving mail from the internet. I'm on a business DSL line from Bellsouth, so the ports shouldn't be blocked.

I have a user set up (through the Server Management screen) somebody and the email address listed is which is what it's supposed to be.

How do I get Entourage 2004 to connect to this account and download the mail? Mail should be coming directly to my exchange server so I don't need the POP3 connector.


Author Comment

ID: 17854509
Update, got Entourage to connect successfully to the Exchange server. I can send email out, but it is still not receiving from the internet.

Get 15 Days FREE Full-Featured Trial

Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users

LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17854892
WHOAH... I didn't see that coming... it would have been a very good idea to indicate that you were connecting with a Mac for this... since there is a problem with your overall configuration if that's the case.  If you use Macs on your SBS Network, you should not use a .local domain name (instead use something like .lan).  This is because Macs use .local as their internal space which will cause a conflict.

See for complete details.

There are some workarounds... but if this is a new install, I'd suggest you flatten and start over (no way to change a domain on SBS otherwise).  In the long run, you'll be much happier.


Author Comment

ID: 17854958
Ok, thanks for that Jeff. I'll flatten and use another domain name. What kind of issues are there if I were to use my purchased .com name?

LVL 74

Accepted Solution

Jeffrey Kane - TechSoEasy earned 125 total points
ID: 17856821
There is no relationship between your internal domain and your Internet domain.  If you use your .com for your Internal domain then you would need to manually configure DNS entries internally in order for computers within your LAN to find your website hosted elsewhere.  Although some experts will tell you that it's okay... I prefer not to do that because I think it blurs the lines between the Internet and your internal domain which could then cause a major security problem.

You should really review the "Your Network" section of the SBS Getting Started Guide (  And be sure to follow the Getting Started Guide when you rebuild:


Featured Post

Enroll in June's Course of the Month

June’s Course of the Month is now available! Experts Exchange’s Premium Members, Team Accounts, and Qualified Experts have access to a complimentary course each month as part of their membership—an extra way to sharpen your skills and increase training.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Small Business Server 2011. NOTE: This guide has been written using the preview version of SBS2011 therefore some of the screens may …
I've often see, or have been asked, the question about the difference between the Exchange 2010 SP1 version, available as part of Small Business Server (SBS) 2011, and the “normal” Exchange 2010 SP1 Standard. The answer to the question is relativ…
This video Micro Tutorial shows how to password-protect PDF files with free software. Many software products can do this, such as Adobe Acrobat (but not Adobe Reader), Nuance PaperPort, and Nuance Power PDF, but they are not free products. This vide…
There's a multitude of different network monitoring solutions out there, and you're probably wondering what makes NetCrunch so special. It's completely agentless, but does let you create an agent, if you desire. It offers powerful scalability …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question