Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

Clients can not resolve DNS names Behind Firewall

Posted on 2013-12-17
2
198 Views
Last Modified: 2014-01-03
Hi,

I have a problem joining a server in my DMZ zone to the domain . my configuration is as follows:

LAN : has windows 2008R2 DC with DNS service up and running
DMZ : has windows 2008R2 server configured to point to Windows 2008 R2 DC as it's DNS server
the firewall between them is Cisco ASA , I opened all ports from DMZ to Internal (for testing)
I can ping the DNS , but I can not resolve any DNS names .
I attached a schematic diagram illustrate my scenario
any suggestion ??
DNS-Issue.pdf
0
Comment
Question by:emiahmad
2 Comments
 
LVL 5

Accepted Solution

by:
Prashant Shrivastava earned 300 total points
ID: 39723374
Have you allowed port number 53 (TCP UDP both) between servers (client to server)?
0
 
LVL 45

Expert Comment

by:Craig Beck
ID: 39725079
You'll need to open those ports both ways.  The traffic is UDP, so you have to allow traffic back from the server to the DMZ too.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question