How to configure the DNS server as a SecureNAT client

How to configure the DNS Server as a SecureNAT Client

For the DNS server to be able to route the response back to the Internet, you must set the default gateway to go through the ISA Server computer and configure the DNS server to be a SecureNAT client.

To configure your DNS server as a SecureNAT client, open the TCP/IP properties page on the server's network adapter, and set the default gateway IP address to the IP address of the ISA Server internal network adapter.

Note: If you have a routed network and your DNS server is on a different network segment, point the default gateway to a router, and configure the router to route Internet-bound packets to the ISA Server internal IP address

To test the internal DNS Server from the Internet, first, create a new host record on the internal DNS server to use for testing (call it dnstest). Next, from a computer connected to the Internet, use a tool such as NSLOOKUP to query dnstest.chicagotech.net (where chicagotech.net is the name of your domain) and verify that the query is successful. Remember that the IP address you use for the NSLOOKUP query should be the IP address of the ISA Server external network adapter.

Post your questions, comments, feedbacks and suggestions

Contact a consultant