matrixcomputer
asked on
What type of DNS record to add to make Server 2003 FTP work internally and externally.
I'm trying to make a Server 2003 server running FileZilla FTP Server work on the cname mail.domain.com. mail.domain.com points to the company's WAN ip address. FTP works perfectly from outside the network, but not from inside. I tried adding a A record in the foward lookup zone for mail.domain.com to point to the local IP of the server, but then the external FTP stopped working. Help????
I suggest you to use two different hostnames for accessing your FTP server from both Internal & External. For External access, use mail.domain.com. For Internal access, create internalmail.domain.com.
Can you let me know how your DNS is setup? Howz ur network is structured?
Can you let me know how your DNS is setup? Howz ur network is structured?
On your firewall.. are you pointing FTP traffic to the IP address of the server or the FQDN?
If you set up the firewall to forward FTP Traffic to the IP address of your FTP server.. then set up a forward lookup zone for domain.com with an A record for mail.domain.com things should work both internally and externally.
Unless your in-house DNS server is also the authoritative DNS server for domain.com .. in that situation i'd recommend that you run two DNS servers.. one to be authoritiative for lookups from the internet.. another for local lookups, since you'll never be able to have the same hostname pointed to both the external IP address for internet lookups and the internal address for local lookups.
Another option would be to set up the HOSTS file on your workstations to point mail.domain.com to the internal address of the server.
If you set up the firewall to forward FTP Traffic to the IP address of your FTP server.. then set up a forward lookup zone for domain.com with an A record for mail.domain.com things should work both internally and externally.
Unless your in-house DNS server is also the authoritative DNS server for domain.com .. in that situation i'd recommend that you run two DNS servers.. one to be authoritiative for lookups from the internet.. another for local lookups, since you'll never be able to have the same hostname pointed to both the external IP address for internet lookups and the internal address for local lookups.
Another option would be to set up the HOSTS file on your workstations to point mail.domain.com to the internal address of the server.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
As for as i know by adding A record for FTP will not harm anything. You may also try to give different name to connect to the FTP server internally. That is another option. But if you give more details about how FTP is published , i can try and help you