Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

DNS server in DMZ or Inside?

I'm currently using a Win2003 server as my DMZ on the inside of the network. It's also the server I use as my Domain Controller.

I am reviewing some of my policies and considering some changes. Is it best to have my DNS servers on the Inside or on the DMZ?

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Silver

Re: DNS server in DMZ or Inside?

Roland

It is not clear to me from your post what the usage of the DNS server is, and that would influence where you place the server. If the DNS server is only accessed by internal users then placement on the inside is fine. But if the DNS server is also access by anyone outside then I believe that you should place the DNS server in the DMZ.

HTH

Rick

3 REPLIES
Hall of Fame Super Silver

Re: DNS server in DMZ or Inside?

Roland

It is not clear to me from your post what the usage of the DNS server is, and that would influence where you place the server. If the DNS server is only accessed by internal users then placement on the inside is fine. But if the DNS server is also access by anyone outside then I believe that you should place the DNS server in the DMZ.

HTH

Rick

New Member

Re: DNS server in DMZ or Inside?

Rick, the DNS server is only accessed by my internal users. It of course goes out to my ISP to look up when there is a request that isn't it it's tables. I thought it was ok on the Inside network but a bit of confirmation is always nice.

Thanks

Hall of Fame Super Silver

Re: DNS server in DMZ or Inside?

Roland

As long as the DNS server inside initiates the request to outside servers the responses should be allowed through and not represent a security threat.

HTH

Rick

636
Views
4
Helpful
3
Replies