Re: Is NetBIOS Over TCP Required For Authentication?
From: Phillip Windell (_at_.)
Date: 03/29/04
- Previous message: Lanwench [MVP - Exchange]: "Re: Use of firewall software in desktops"
- In reply to: CHANGE USERNAME TO westes: "Re: Is NetBIOS Over TCP Required For Authentication?"
- Next in thread: Steven L Umbach: "Re: Is NetBIOS Over TCP Required For Authentication?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 29 Mar 2004 09:52:21 -0600
"CHANGE USERNAME TO westes" <DELETE_westes@earthbroadcast.com> wrote in
message news:oPCdneRm--Kl4Prd4p2dnA@giganews.com...
> In our case, we do not want anyone at the proxy server console to be able
to
> easily resolve hostnames on the internal network using DNS.
I'm sorry, but that is an unrealistic thing to "want". If the proxy cannot
resolve internal names then it will not be able to verify if a FQDN is
internal of external because it won't be able to resolve it, then it will
not be able to compare it to the LAT to determine if it should be processed
by the proxy services or allow to function directly.
In an Active Directory Environment (Win2000 or 2003) the proxy must use the
Internal DNS to resolve names, then the DNS Server will use "Forwarders" to
pass the requests to the ISP's DNS for name it cannot resolve from its own
database.
> Why wouldn't
> we put the external NIC at the top of the list?
Because it won't function on the Domain properly. It will start having
trouble finding the Domain Controller and authentication will either fail or
at least become unreliable.
-- Phillip Windell [MCP, MVP, CCNA] www.wandtv.com
- Previous message: Lanwench [MVP - Exchange]: "Re: Use of firewall software in desktops"
- In reply to: CHANGE USERNAME TO westes: "Re: Is NetBIOS Over TCP Required For Authentication?"
- Next in thread: Steven L Umbach: "Re: Is NetBIOS Over TCP Required For Authentication?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
