Block domain zone company.local in Win2003 DNS Server from internet user

Posted on 2007-08-01
Last Modified: 2007-10-14
Dear All,

I have DNS with AD Integration in a Win2003.
That DNS Server has internal IP address.
It holding 2 domain zone company.local and
How do I set Win2003 DNS Server so that zone company.local  can only be seen by internal user not by public user.
So that I am not exposing all internal server ip for public consumption.
1 solution is by using split DNS. 2 DNS Server, 1 for external user and 1 for internal. But that one mean I need to have 2 DNS server.

Any other idea

Question by:nbctcp
    LVL 7

    Accepted Solution

    you need two separate servers in a windows environment.  if you used BIND you could setup views that allow different answers to be given based on where the query comes from but microsoft dns doesnt hold that functionality....

    you should never have public and private dns information on the same server as your AD server.  this is one of the most important security measures you address.  you are allowing the public (good and bad poeple) to touch your internal domain - big no no.
    LVL 1

    Expert Comment

    Forced accept.

    EE Admin

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    IT, Stop Being Called Into Every Meeting

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (, affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.
    This video discusses moving either the default database or any database to a new volume.

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now