Solved

Clients can not resolve DNS names Behind Firewall

Posted on 2013-12-17
2
196 Views
Last Modified: 2014-01-03
Hi,

I have a problem joining a server in my DMZ zone to the domain . my configuration is as follows:

LAN : has windows 2008R2 DC with DNS service up and running
DMZ : has windows 2008R2 server configured to point to Windows 2008 R2 DC as it's DNS server
the firewall between them is Cisco ASA , I opened all ports from DMZ to Internal (for testing)
I can ping the DNS , but I can not resolve any DNS names .
I attached a schematic diagram illustrate my scenario
any suggestion ??
DNS-Issue.pdf
0
Comment
Question by:emiahmad
2 Comments
 
LVL 5

Accepted Solution

by:
Prashant Shrivastava earned 300 total points
ID: 39723374
Have you allowed port number 53 (TCP UDP both) between servers (client to server)?
0
 
LVL 45

Expert Comment

by:Craig Beck
ID: 39725079
You'll need to open those ports both ways.  The traffic is UDP, so you have to allow traffic back from the server to the DMZ too.
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
I'm a big fan of Windows' offline folder caching and have used it on my laptops for over a decade.  One thing I don't like about it, however, is how difficult Microsoft has made it for the cache to be moved out of the Windows folder.  Here's how to …
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now