SBS 2003 Standard, 2 NICs, .local and .com domains, and email problems

Posted on 2006-10-31
Medium Priority
Last Modified: 2010-04-19
I am somewhat of a newbie when it comes to setting up DNS entries and configuring Exchange, so please bear with me.

Here is my current setup:

Public IP (static) -> DSL Modem/Router -> NIC 1 ( -> SBS (DHCP, DNS, Exchange, IIS) -> NIC 2 ( -> local network

I am able to connect to the net with no problem as well as connecting to the internal website (companyweb).

My domain name (xyz.com) is hosted with GoDaddy and I think I have those DNS records set up properly to point to my public IP address. Here is what they look like:

 A (Host)        
Host      Points To         TTL
@       xxx.xxx.xxx.xxx   3600
mail       xxx.xxx.xxx.xxx   3600

CNAMES (Aliases)             
Host      Points To      TTL
www       @               3600
ftp           @               3600

MX (Mail Exchange)             
Priority      Host      Goes To                TTL
0                 mail       xxx.xxx.xxx.xxx    3600

On the Exchange side of things I have this so far:

Server Mgmt -> Advanced Mgmt -> First Organization -> Recipient Policies -> Default Policy -> Properties -> Email Addresses ->

xyz.com (default)

My DNS only has the .local forward lookup zone so far. I need help configuring the rest of it.

If anything else is needed, let me know.

Now, here is what I'm trying to accomplish.

Keep the server as a Gateway, be able to send/receive mail on this box for xyz.com, have the xyz.local and xyz.com domains accessible from the internal side and have xyz.com available to the outside, and be able to connect to the Exchange server from both sides with Macs and PCs.

I have figured out how to connect the Macs to folder shares using SMB, so no problems there.

I would like to keep the set up the way it is with 2 NICs (I guess I just like the physical seperation).

Question by:indy1979
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17847095
Your setup is quite normal, except that you should really NOT host a public website (www.xyz.com) on your SBS.  This is truly a major security risk, and if you want to host your own site it's suggested that you do so on a separate server in a DMZ.  However, I'd suggest that you host it in a major hosting facility such as GoDaddy or any other of your choice.

Then...you don't configure DNS manually with an SBS.

You should ONLY use the Configure Email and Internet Connection Wizard (CEICW -- which is linked as Connect to the Internet in the Server Management Console > Internet and Email)

A visual how-to is here:  http://sbsurl.com/ceicw and a full networking overview for SBS is at http://sbsurl.com/msicw

Within that wizard you'll see a "more information" button on each screen that has invaluable help in deciding which options to select.  Be sure to check those out as well.


Author Comment

ID: 17852215
Ok, so let's take the external web site out of the picture.

I'm still having trouble with exchange. It is not receiving mail from the internet. I'm on a business DSL line from Bellsouth, so the ports shouldn't be blocked.

I have a user set up (through the Server Management screen) somebody and the email address listed is somebody@xyz.com which is what it's supposed to be.

How do I get Entourage 2004 to connect to this account and download the mail? Mail should be coming directly to my exchange server so I don't need the POP3 connector.


Author Comment

ID: 17854509
Update, got Entourage to connect successfully to the Exchange server. I can send email out, but it is still not receiving from the internet.

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 17854892
WHOAH... I didn't see that coming... it would have been a very good idea to indicate that you were connecting with a Mac for this... since there is a problem with your overall configuration if that's the case.  If you use Macs on your SBS Network, you should not use a .local domain name (instead use something like .lan).  This is because Macs use .local as their internal space which will cause a conflict.

See http://sbsurl.com/mac for complete details.

There are some workarounds... but if this is a new install, I'd suggest you flatten and start over (no way to change a domain on SBS otherwise).  In the long run, you'll be much happier.


Author Comment

ID: 17854958
Ok, thanks for that Jeff. I'll flatten and use another domain name. What kind of issues are there if I were to use my purchased .com name?

LVL 74

Accepted Solution

Jeffrey Kane - TechSoEasy earned 500 total points
ID: 17856821
There is no relationship between your internal domain and your Internet domain.  If you use your .com for your Internal domain then you would need to manually configure DNS entries internally in order for computers within your LAN to find your website hosted elsewhere.  Although some experts will tell you that it's okay... I prefer not to do that because I think it blurs the lines between the Internet and your internal domain which could then cause a major security problem.

You should really review the "Your Network" section of the SBS Getting Started Guide (http://sbsurl.com/net101).  And be sure to follow the Getting Started Guide when you rebuild:  http://sbsurl.com/start


Featured Post


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This guide is intended for migrating Windows 2003 Standard with Exchange 2003 to Windows Small Business Server 2008. You will need the following: Exchange Best Practice Analyzer: http://www.microsoft.com/downloads/details.aspx?FamilyID=DBAB201F-…
The SBS 2011 release date (RTM) is supposed to be around Christmas, 2011.  This article is a compilation of my notes -- things I have learned first hand.  The items are in a rather random order, but I think this list covers most of what is new and d…
In this video, Percona Solution Engineer Dimitri Vanoverbeke discusses why you want to use at least three nodes in a database cluster. To discuss how Percona Consulting can help with your design and architecture needs for your database and infras…
How to fix incompatible JVM issue while installing Eclipse While installing Eclipse in windows, got one error like above and unable to proceed with the installation. This video describes how to successfully install Eclipse. How to solve incompa…
Suggested Courses

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question