Solved

Clients can not resolve DNS names Behind Firewall

Posted on 2013-12-17
2
195 Views
Last Modified: 2014-01-03
Hi,

I have a problem joining a server in my DMZ zone to the domain . my configuration is as follows:

LAN : has windows 2008R2 DC with DNS service up and running
DMZ : has windows 2008R2 server configured to point to Windows 2008 R2 DC as it's DNS server
the firewall between them is Cisco ASA , I opened all ports from DMZ to Internal (for testing)
I can ping the DNS , but I can not resolve any DNS names .
I attached a schematic diagram illustrate my scenario
any suggestion ??
DNS-Issue.pdf
0
Comment
Question by:emiahmad
2 Comments
 
LVL 5

Accepted Solution

by:
Prashant Shrivastava earned 300 total points
ID: 39723374
Have you allowed port number 53 (TCP UDP both) between servers (client to server)?
0
 
LVL 45

Expert Comment

by:Craig Beck
ID: 39725079
You'll need to open those ports both ways.  The traffic is UDP, so you have to allow traffic back from the server to the DMZ too.
0

Featured Post

Want to promote your upcoming event?

Are you going to an event? Are you going to be exhibiting at a tradeshow? Talking at a conference? Using a promotional banner in your email signature ensures that your organization’s most important contacts stay in the know and can potentially spread the word about the event.

Join & Write a Comment

This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
Resolve DNS query failed errors for Exchange
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now