Solved

Can't access external website over internal domain

Posted on 2010-09-19
8
1,416 Views
Last Modified: 2012-08-13
Hi,

SBS 2008 - new setup

DOMAIN NAME:   companysafety.com
IP:   64.23.137.246 (3rd party webhost IP)

A RECORD:   www.companysafety.com
IP:   64.23.137.246 (3rd party webhost IP)

- webhost does not control domain name
- webhost uses shared IP / storage for websites


A RECORD:   remote.companysafety.com
IP:   62.35.125.210 (Static WAN IP of Server)
- used for Remote Web Workplace, Outlook Web Access, Remote Desktop etc.

MX RECORD:   mail.companysafety.com
IP:   62.35.125.210 (Static WAN IP of Server)
- used for Exchange


Server Domain:   company.local
Server IP / DNS:   192.168.15.1
DHCP enabled through Server

Client machines logged onto the server cannot access "www.companysafety.com", even though it's located offsite on a separate WAN IP.
However, when the Client machine is using a different DNS address (ISP's DNS supplied through the router), it can see "www.companysafety.com"
Anyone using a separate internet connection can also see "www.companysafety.com"

Does anyone know what's causing this issue and how I can fix it?

Thanks
   
 
0
Comment
Question by:Clownie669
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
8 Comments
 
LVL 10

Expert Comment

by:ddiazp
ID: 33712027
do:

nslookup
server 4.2.2.2
www.companysafety.com  (or whatever domain you're working with)
(record IP in output)


Does this IP match what you have on your A record (www) under the companysafety.com zone?


When your clients query DNS for a domain, if your DNS server has that domain configured, the server will take control of any query to that domain.

For example, if you add a zone microsoft.com, and your clients query update.microsoft.com or *.*.microsoft.com for that matter, DNS will fail unless you have the matching records.
0
 

Accepted Solution

by:
Insideview earned 125 total points
ID: 33712331
If you  check the forward lookup zone on the server and enter a Cname for Www pointing it to the external address it should work after a reboot
0
 

Author Comment

by:Clownie669
ID: 33712366
The server is currently down.  I'll be going in later tonight to finish the setup.
I'll try your suggestion.

Thanks
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 

Author Comment

by:Clownie669
ID: 33713836
I went to "DNS" through "Administrative Tools" and expanded the "Forward Lookup Zones"
There are 4 listings:

_msdcs.company.local
company.local
companysafety.com
remote.companysafety.com

I added a "New Host (A or AAAA)..." record to all except "_msdcs.company.local" and rebooted the server.
Didn't work.

I'm new to this.  
Which listing am I supposed to add the new record too?
- "remote.companysafety.com" is the current public domain I setup using the "Set up your Internet address" wizard in the SBS Console
- company.local is the local domain
- "companysafety.com" is the old public domain I setup using the wizard.


Thanks
0
 

Expert Comment

by:Insideview
ID: 33714106
Ah perhaps the 4 are the problem,
On my server I only have 2 in the forward lookup
_msdcs.mycompany.local
and
mycompany.local
perhaps if you companysafe.com were removed the computers inside the LAN would be forced to look outside on the WAN for the website
0
 
LVL 10

Assisted Solution

by:ddiazp
ddiazp earned 125 total points
ID: 33717353
what do you get when you do :

nslookup www.companysafety.com

on the client machines?

and what do you get when you do:

nslookup
server 4.2.2.2
www.companysafety.com

on the client machiines?


The result must match - if it doesn't, you haven't added an 'A' record "www" with the correct IP.

When you add the A record make sure to name it "www" and not "www.companysafety.com" (DNS will append the domain name to the record).

Also, check the hosts file for the clients to make sure there's no entry for www.companysafety.com pointing somewhere else:

C:\WINDOWS\system32\drivers\etc\hosts
0
 

Author Comment

by:Clownie669
ID: 33718744
Sorry for not responding sooner.

I was having another issue getting a trusted SSL Cert approved.
I'll have access to the server later tonight and will try your suggestions.


Thanks
0
 

Author Closing Comment

by:Clownie669
ID: 33804846
Sorry for not responding sooner...again.

The solutions provided by Insideview and ddiazp were correct.


Thanks again!
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question