Solved

Lockdown internet using DNS server

Posted on 2011-02-24
1
529 Views
Last Modified: 2012-05-11
I tried something yesterday that didn't work very well and I'm hoping you can spot the error.

A client of ours wanted to lock down the internet for their users while keeping the managers free to do whatever.

There are 2 DNS servers there. One forwards out to the internet and I configured the second as a forwarder to opendns.com. DNS2 was configured as a secondary zone to DNS1. I put the 4 XP computer accounts into their own OU and applied a group policy to assign DNS2 as their DNS server.

When the policy replicated, however, they didn't have access to their main database (hosted on DNS1) or the Internet.

I ended up having to undo the whole solution last night and now we're back where we started - with DNS2 disabled and all machines pointing to DNS1.

What do you guys think?
0
Comment
Question by:taiell0
1 Comment
 
LVL 6

Accepted Solution

by:
dr_linux earned 250 total points
ID: 34969780
The DNS entries should match on both DNS1 and DNS2.  It seems that your main database DNS name was not entered onto your other DNS server.  As long as the entries match, you can set up the other one not to even forward.  Keep in mind this only drops the name resolution, user can still enter the IP addresses and be fine (yes, most users may not even try).
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Join & Write a Comment

If your system is showing symptoms of browser hijacks or 'google search redirects' check out my other article (http://rdsrc.us/u3GP7A) first and run the tool TDSSKiller (http://rdsrc.us/GDBBs4) to get rid of the infection. Once done, and if the …
BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (https://kb.isc.org/article/AA-01272), affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now