Cloudflare Public DNS and Internal AD Domain DNS conflict?

I have a client whose web design team is using cloudflare for their public nameservers. At the clients location, we have an active directory domain with several servers, and we are running internal DNS for their domain (lets say "client.com" is the domain).The problem I'm seeing is that since PC's in their office need to point to internal DNS, every time CloudFlare changes the IP address of their website -- which seems to happen at least every other week, sometimes multiple times in a week, I have to manually update my internal DNS records with the new IP addresses so that the website is accessible again from within their office. Obviously those that are outside of the office have no problem since external users are looking to public DNS servers that then point to the cloudflare nameservers. But I'm not sure how to make this happen...
This topic first appeared in the Spiceworks Community

I ran the test again with the verbose switch. Relevant part in bold.
               TEST: Basic (Basc)
                  The OS
                  Microsoft Windows Server 2008 R2 Standard (Service Pack level: 1.0)
                  is supported.
                  NETLOGON service is running
                  kdc service is running
                  DNSCACHE service is running
                  DNS service is running
                  DC is a DNS server
                  Network adapters information:
                  Adapter [00000007] Intel(R) PRO/1000 MT Network Connection:
                     MAC address is redacted
                     IP Address is static
                     IP address: redacted
                     DNS servers:
                        redacted [Valid]
                        redacted [Valid]
                        redacted [Valid]
                  The A host record(s) for this DC was found
The SOA record for the Active Directory zone was not found
Warning: The Active Directory zone on this DC/DNS server was not found (probably a misconfiguration)
Root zone on this DC/DNS server was not found
So, I just need to know how to fix the SOA record. Looking that up now.

Similar Messages

Internal and Public DNS conflict breaks mail

History:
We set up a new Mac Mini Server to replace our existing Server. The Mac Mini Server is setup behind a Time Capsule, which acts as our router and DHCP server. It also acts as our firewall on the public IP address and forwards mail to our internal server. Our situation is almost identical to the example situation on page 18 to 19 in the 'Getting Started' guide.
Our ISP acts as our DNS server and they host our public website. They also used to host our mail, but we have now moved the mail to our new in-house server. We asked our ISP to update their MX records to point to our static public IP address. Public DNS records for server.mydomain.com also resolve to this IP address.
When we originally set up the new mac mini server, the ISP had not yet updated the MX records. I am wondering if this affects how the Server sets up DNS on the local server machine?
Issue:
The local server machine on the local LAN is called server.mydomain.com, which resolves via local DNS (hosted by our server) to the server's internal IP address. (The local DNS server was setup automatically by the Server during initial installation / setup.) This conflicts with with public DNS records which identify server.mydomain.com with our public IP address at 205.200.19.225. This somehow causes confusion for the server which consequently seemingly randomly resets our domain (mydomain.com) and host name (server.mydomain.com) settings under Mail settings - which breaks our mail service. (We then edit these to the correct settings and all works again.)
I spoke to an Apple tech and they advised that we reinstall the Server operating system, using a local server name that differs from the public name. e.g. server.mydomain.lan (local) vs. server.mydomain.com (public).
*This may seem like a dumb question*: Would it be easier to keep our local host and DNS set up to server.mydomain.com and then rather have our ISP change the records for our public address / IP to mail.mydomain.com or public.mydomain.com? If we could make the change via the ISP's records versus our own, then it would save us a lot of work.
*A second potentially dumb question:* Since we rely on our ISP for DNS name servers, could we delete / stop the local DNS server for the local network and just use straight IP addresses instead?
*Plan of Action:*
Assuming that there is not an easy fix via the ISP's DNS records, then I'll reinstall the operating system and use server.mydomain.lan as the local machine and domain name. If I do this, then what should I be using as the domain and host name settings in mail? .com or .lan?
Should there be any need to manually configure DNS settings to make Mail work?

Mr Hoffman and Corbywan - thanks for the interesting and educational discussion. I must admit that I am still a bit confused and would appreciate any further help in understanding this issue!
*My situation:*
- Server on a LAN, which sits behind a Time Capsule router.
- The Time Capsule router serves DHCP and Internet to the LAN and sits on our public static IP Address.
- Our ISP has set up MX and domain records to forward public requests for our domain to our static IP address.
- Time Capsule acts as our firewall and forwards Mail and other incoming services to our internal server via port forwarding.
- Local DNS service is provided by the local server so that it can provide services to the local network. Non local requests are forwarded to the ISP DNS service.
*The problem*
We seem to have established that Snow Leopard Server breaks when the internal domain name matches the public domain name, because of conflict between the internal and public DNS which resolve to different IP addresses for the same domain.
*The solution*
I am looking for the easiest and most basic way to fix this problem. My understanding is that the simplest would be to reinstall our Snow Leopard Server to a new and different local domain name.
I am thinking of using server.example.lan for our local LAN domain name - which would be resolved to our private IP address via local DNS on the local server. I would be keeping server.example.com for our public domain name - which would be resolved to our public IP address, which would be forwarded from the Time Capsule to the internal server.
Now where I start getting confused is this: If Snow Leopard Server requires a Fully Qualified Domain Name to do things like send mail, then do I need to register my internal domain name? And how would this resolve from a public DNS server to the internal private IP address? Or is it more an issue where as long as the internal (albeit 'fake') domain name does not conflict with an existing public domain name?
*Other items:*
After setup, I will verify that Snow Leopard Server has setup our local DNS correctly for local DNS service.
If I understand correctly, I would set up Mail Settings - 'Domain Name' as the local domain name: i.e. example.lan and I would set up the Host Name as server.example.lan - is this correct? Would this work if these are not FQDN?
How does the mail server reconcile these local domain names with the public domain names? I assume that I need to check the box at Mail - Settings - Advanced - Hosting: "Include server's domain as local host alias" ? Or would I manually add an alias to the Local Host Aliases under the same tab?
Thanks!

Lync Edge and Proxy server public DNS records port forwarding rules

Hi All
I have question in regards to port forwarding rules for port 443 of simple url.
I have 4 public ip addresses.
1 edge server (4 nics , 3 running with different ip for sip, meet and dialin in DMZ network, 1 connected to internal local network).
1 proxy server (2 nics, 1 running with an ip which is in DMZ same as edge, and 1 connected to internal local network)
1 front end (lync 2013 standard installed.) connected to internal local network
1 office web apps . connected to internal local network
The question is that I am using 3 public ip addresses respectively on public DNS records for sip, meet and dialin(av) and using port 443 which has been set on edge server. So , I can use 3 DMZ network ip address on edge for sip, meet
and dialin (av) port forwarding from 3 public ip addresses as per in Microsoft document.
However, I also have a reverse proxy .Hence, my understanding is all public DNS records except SIP and port 443 should be pointed and port forwarded to reverse proxy ip address which is in DMZ network as it would redirect 443 and 80 to 4443 and 8080 to front
end.
Now the question has been clear, if simple URLs public DNS record and port forwarding rules for port 443 should be pointed to reverse proxy server, why they need to be set on each ip address and port number in Front end server topology to edge server?
If anyone knows, please give a help how to set it correct and what is supposed to be a correct configuration for a topology lync 2013

Hi George
Thanks for your reply. Attached is my topology which could make my it bit clear. You may see the public dns host record from the image. I set sip, meet, dialin , and owa 4 host records. The first 3 records are pointed to lync edge by doing a NAT with port
443 which is the same as per you said. However my understanding is they should be pointed to reverse proxy instead as for instance, I need meet.xxx.com with port 443 to be redirected to port 4443 through reverse proxy server to the front end. So when the external
customers who do not have lync client installed to their machine then we can shoot a lync meeting and send to them via outlook and they just need to click on join lync meeting link in the email to join in such a meeting based on IE. (Is my understanding correct?)
If lync web meeting works like so , then the question is why I need to set three SAME addresses in front end topology builder for edge and make them point to edge server instead?　
１. Access Edge service (SIP.XXX.COM) ---> I understand that it is used for external login lync front end.
2. Webconf edge server(Can I set to meet.xxx.com which is the same as simple URL that points to reverse proxy?) ----> If I can set this address to be the same as simple url address that points to reverse proxy, why should it need to be NATed to edge
instead? TO BE HONEST, if I HAVE tested, if I set this url as sip.xxx.com which means to use a single FQDN and ip address with port 444 and points simple url meet.xxx.com to reverse proxy, it will still work to join lync meeting sent by
outlook.I DO NOT REALLY UNDERSTAND WHAT this URL used for at this stage.
3. AV edge --- same as webconf
Regards
Wen Fei Cao

How to configure Exchange 2010 to use a certain MX record that is unavailable with public DNS

Dear all,
as for TLS encryption I'm required to send emails destined for a certain domain via a dedicated send connector that has TLS encryption enabled/enforced. Thing is that the recipient's corresponding domain MX records cannot be resolved using public DNS. As soon
as I verify MX records for the recipient's domain using nslookup I only receive MX records that do not accept TLS. In order for TLS to work I'm required to send all outgoing emails to that specific domain via a certain predefined host, i.e. MX record, that
is known to me and Exchange needs to know as well. But how can I configure Exchange to use a certain MX record (that resolves to mxtls.<domain>.com instead of mx.<domain>.com without being available in public DNS?
Editing the hosts file directly on the Exchange server? Not an option, right?
Messing with my ADS integrated DNS not an option, too, as I then have to add all sorts of entries for that zone, e.g. www and stuff like that, to make it work?
I'm lost here, any help would be greatly appreciated.
Alex
Alexander Ollischer Diplom-Wirtschaftsinformatiker (FH) Citrix & Microsoft Certified Engineer (CCEA, CCEE, MCSA, MCSE, MCDBA, MCTS) Afontis IT+Services GmbH Baierbrunner Straße 15 81379 München Deutschland Telefon (089) 74 34 55-0 Fax (089) 74 34 55-55
mailto:[email protected] http://www.afontis.de http://www.itganzeinfach.de Amtsgericht München, HRB 109 005 Geschäftsführer: Thomas Klimmer

Well, I figured it out by myself. I just had to add the corresponding server, i.e. mxtls.<domain>.com, to the Smarthost configuration for the corresponding Send Connector and set its RequireTLS setting to $True.
Alex
Alexander Ollischer Diplom-Wirtschaftsinformatiker (FH) Citrix & Microsoft Certified Engineer (CCEA, CCEE, MCSA, MCSE, MCDBA, MCTS) Afontis IT+Services GmbH Baierbrunner Straße 15 81379 München Deutschland Telefon (089) 74 34 55-0 Fax (089) 74 34 55-55
mailto:[email protected] http://www.afontis.de http://www.itganzeinfach.de Amtsgericht München, HRB 109 005 Geschäftsführer: Thomas Klimmer

Use of Public DNS Server

I have an iMac, Mac Mini and a Macbook Pro connected to a Airport Extreme Base Station. I normally use a Public DNS Server and I am not sure where to put the DNS URLs. Do I put them on the individual computers or is there somewhere in the Airport Extreme Base Station that they go? where ever they belong please provide location and instructions. Thanks.

Configuring the AirPort Extreme with the DNS makes it so that you do not have to configure each individual computer on the WLAN, the DNS settings will be handed down to the devices when they are given their internal IPs, but as long as the base station does not have a competing/conflicting DNS setup, configuring each individual device, as suggested by Carolyn, works also.
However, something strange can happen sometimes when you use a public DNS setup. I use the one Carolyn suggests, OpenDNS, but I cannot access any of the webpages of my ISP with this configuration. I have Todo en Uno (All in One), a service that provides cable, telephone and internet service from my local cable company, CableVisión. So with the OpenDNS setup I cannot configure the digital options for my telephone service, such as blocking and unblocking Int'l long Distance calls. I have to remove the OpenDNS setting to do so. But I created a work around using Locations in the Network settings. I have one Location with my ISP's DNS settings and another Location with OpenDNS settings. I can quickly switch between the two when I need to access my ISP's website.
Dah•veed

Exchange 2013 CAS DNS Round robin Public DNS Record

Dear All,
If I am going to use DNS round robin as CAS redundancy. How should I map the public DNS record? Do I need to map 2 public IP for 2 CAS server to the mail domain? THanks
Best Regards,
Elroy

Dear Elroy
I am not sure about the success rate of your implementations but yes if it is round robin what you require you need add 2 ip addresses.
Suggestion:
Why don't you implement a CAS with a load balancer and then you can map the Public IP to the one IP on the Load Balancer.
Good Luck.

Making mini.dandyserver.us a public DNS

Hello out there,
fairly new to DNS and server config. I have the registered domain dandyserver.us, with godaddy.
My Mac mini server is behind an extreme and connected to comcast ISP. What I want to do is have the server accessible to WAN. SO I suppose my question is how do I setup the server, or godaddy, to make it public?
As it stands, mini.dandyserver.us resolves to 10.0.1.199.
thanks.

You have no public DNS translations.
There is no A (machine) record for mini.dandyserver.us presently listed in the public DNS; I just checked that with a dig command, as described in some of the troubleshooting documentation I've linked to.
You're likely getting an unknown-host error for attempted accesses from outside your LAN.
Kindly re-read the web pages I've previously referenced. If that material does not make sense, please (and so that I might improve it) indicate specifically what's confusing you.
And your ISP may or may not allow inbound server-oriented connections.

Use Google's Public DNS Server To Fix Apple TV Streaming Problems

Many people have been having a streaming problem with the Apple TV - especially with Netflix. In fact, it's often the most popular topic on this forum. After having the same problem off and on for two years, I finally figured out the following solution. It uses Google's public DNS service instead of your ISPs DNS.
1. Navigate to Settings >> General >> Network and select Configure TCP/IP.
2. Select “Manually” next to Configure IP.
3. Dont change the IP address or the Subnet Mask and Router Address. Just click "Done".
4. Set the DNS Address screen with the following: 008.008.008.008 and click “Done.”
You should now be able to stream more smoothly on your Apple TV.
This problem is probably caused by a bad streaming server somewhere on Netflix's CDN (Content Delivery Network). The DNS points your Apple TV based on location. By using Google's DNS, you get a different streaming server. That is, of course, a wild guess and is not verifiable by me. But, it makes sense so I'm going with that.
If this works for you, please buy a cup of coffee for a complete stranger or some other selfless, random act of kindness.

Welcome to the  tv Discussion Forums.
Barring interference to the network (which is probably unlikely but not totally out of the question) I'd agree that your problem seems specific to one mac. IMHO reinstalling an OS is more often than not a lazy mans way of saying they can't be bothered to look for the problem and totally unnecessary so far as I am concerned. I don't believe any version of itunes has been a problem for the tv, although there have been the usual problems posted that usually accompany any upgrade (these are more than likely due to updating over damaged files).
Reinstalling itunes will replace the application but not many of the associated preference files that are more likely to be a problem than the application itself. Rather than reinstalling itunes, I'd try creating a new user and try itunes in the new user account to see if the problem persists.
You could also create a new library in the original user account and see if you have similar problems with that library.
Check your network settings and compare them to the other macs that work OK, check for proxy servers and DNS addresses.

Public dns with Oracle AMI

Hi All,
I have created an AMI from ami-47613002. It ran fine and created an oracle database. When I logged in to EM i found following in the properties.
Oracle Home          /u01/app/oracle/product/11.2.0/db_1
Host          ec2-xx-xx-xx-xx.us-east-1.compute.amazonaws.com
Listener          LISTENER_ec2-xx-xx-xx-xx.us-east-1.compute.amazonaws.com
This means it is bound to public DNS of my amazon instance. Next time when i shutdown and start the instance, it will change the public dns. will that affect my db and listner?
Thanks

I guess.... however it is a guess.... is that ec2-xx-xx-xx-xx.us-east-1.compute.amazonaws.com is bound to your server and will not change after a reboot....
-xx-xx-xx-xx- is most likely a unique value bound to your server, so it should be fine. Please do inform us if this is the case. I am interested in your results.
Regards,
Johan Louwers

[svn] 4662: Refactoring to reflect new FXG utils package names to com.adobe .fxg.* for public APIs and com.adobe.internal.fxg. * for internal APIs not guaranteed to remain constant.

Revision: 4662
Author: [email protected]
Date: 2009-01-25 16:05:12 -0800 (Sun, 25 Jan 2009)
Log Message:
Refactoring to reflect new FXG utils package names to com.adobe.fxg.* for public APIs and com.adobe.internal.fxg.* for internal APIs not guaranteed to remain constant.
QA: No
Doc: No
Checkintests Pass
Modified Paths:
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/fxg/TextFXGGraphics.java
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/fxg/TextHelper.java
flex/sdk/trunk/modules/compiler/src/java/flex2/compiler/media/FXGTranscoder.java
Added Paths:
flex/sdk/trunk/modules/fxgutils/src/java/com/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/fxg/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/fxg/FXGConstants.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/fxg/FXGException.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/AbstractFXGNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/AbstractShapeNode.jav a
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/BitmapGraphicNode.jav a
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/DefinitionNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/DelegateNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/EllipseNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/FXGNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/FillNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/FilterNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/GradientEntryNode.jav a
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/GraphicContentNode.ja va
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/GraphicContext.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/GraphicNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/GroupDefinitionNode.j ava
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/GroupNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/LibraryNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/LineNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/MaskPropertyNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/MaskableNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/MaskingNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/PathNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/PlaceObjectNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/RectNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/ScalableGradientNode. java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/StrokeNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/TextGraphicNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/TextNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/TransformNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/fills/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/fills/AbstractFillNod e.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/fills/BitmapFillNode. java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/fills/LinearGradientF illNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/fills/RadialGradientF illNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/fills/SolidColorFillN ode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/filters/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/filters/AbstractFilte rNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/filters/BevelFilterNo de.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/filters/BlurFilterNod e.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/filters/ColorMatrixFi lterNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/filters/DropShadowFil terNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/filters/GlowFilterNod e.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/filters/GradientBevel FilterNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/filters/GradientGlowF ilterNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/strokes/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/strokes/AbstractStrok eNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/strokes/LinearGradien tStrokeNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/strokes/RadialGradien tStrokeNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/strokes/SolidColorStr okeNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/text/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/text/AbstractCharacte rTextNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/text/AbstractTextNode .java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/text/BRNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/text/CDATANode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/text/ParagraphNode.ja va
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/text/SpanNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/transforms/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/transforms/AbstractTr ansformNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/transforms/ColorTrans formNode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/transforms/MatrixNode .java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/BevelType.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/BlendMode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/Caps.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/InterpolationMe thod.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/Joints.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/Kerning.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/LineBreak.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/MaskType.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/ScaleMode.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/ScalingGrid.jav a
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/SpreadMethod.ja va
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/WhiteSpaceColla pse.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/dom/types/Winding.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/sax/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/sax/FXGSAXScanner.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/swf/
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/swf/AbstractFXGGraphics.j ava
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/swf/FXGGraphics.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/swf/ImageHelper.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/swf/ShapeHelper.java
flex/sdk/trunk/modules/fxgutils/src/java/com/adobe/internal/fxg/swf/TypeHelper.java
Removed Paths:
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/FXGConstants.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/FXGException.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/AbstractFXGNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/AbstractShapeNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/BitmapGraphicNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/DefinitionNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/DelegateNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/EllipseNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/FXGNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/FillNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/FilterNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/GradientEntryNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/GraphicContentNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/GraphicContext.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/GraphicNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/GroupDefinitionNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/GroupNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/LibraryNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/LineNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/MaskPropertyNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/MaskableNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/MaskingNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/PathNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/PlaceObjectNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/RectNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/ScalableGradientNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/StrokeNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/TextGraphicNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/TextNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/TransformNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/fills/AbstractFillNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/fills/BitmapFillNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/fills/LinearGradientFillNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/fills/RadialGradientFillNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/fills/SolidColorFillNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/filters/AbstractFilterNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/filters/BevelFilterNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/filters/BlurFilterNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/filters/ColorMatrixFilterNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/filters/DropShadowFilterNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/filters/GlowFilterNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/filters/GradientBevelFilterNode.ja va
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/filters/GradientGlowFilterNode.jav a
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/strokes/AbstractStrokeNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/strokes/LinearGradientStrokeNode.j ava
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/strokes/RadialGradientStrokeNode.j ava
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/strokes/SolidColorStrokeNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/text/AbstractCharacterTextNode.jav a
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/text/AbstractTextNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/text/BRNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/text/CDATANode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/text/ParagraphNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/text/SpanNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/transforms/AbstractTransformNode.j ava
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/transforms/ColorTransformNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/transforms/MatrixNode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/types/BevelType.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/types/BlendMode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/types/Caps.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/types/InterpolationMethod.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/types/Joints.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/types/Kerning.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/types/LineBreak.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/types/MaskType.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/types/ScaleMode.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/types/ScalingGrid.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/types/SpreadMethod.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/types/WhiteSpaceCollapse.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/dom/types/Winding.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/sax/FXGSAXScanner.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/swf/AbstractFXGGraphics.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/swf/FXGGraphics.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/swf/ImageHelper.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/swf/ShapeHelper.java
flex/sdk/trunk/modules/fxgutils/src/java/flash/fxg/swf/TypeHelper.java

The problem with submitting a bug report is I don't know how to replicate it.
The java file showed up on the "Referenced Libraries". I removed it from there and it fixed the problem.
If I return it to the classpath via Eclipse it doesn't demonstrate the problem.
I don't know how it got into the classpath to cause this problem. I even tried editing the classpath (which I'm fairly certain was not how the problem was caused) but that didn't replicate the problem.
I didn't check the .classpath to see what the entry was before I removed it via eclipse so I don't know what the entry looked like. The problem wasn't in the version is SVN so I don't know how to find what changes were made.
If you sill want a bug report I can enter one but with out any instructions on how to replicate it.

Cisco ASA and Internal Hosted Website

I have a Cisco ASA 8.4. I have an internal website for an application that they use both internal and externally (app.domain.com/app is 10.0.0.3) The company that hosts their External Website and DNS created a record that points to http://app.domain.com/app to their public ip 1.2.3.4. Externally everything works great I have port forward for 80 working. The problem is that when the users bring their laptops in to the office they are unable to get to the interanlly hosted website. I think the the firewall is having an issue letting the traffic back in. If i use the internal DNS and create a zone for domain.com with an A record for app.domain.com and point it to 10.0.0.3 the internal address..it works. Of course when they try to access the external website it does not work. So if create an A record that points to the web hosts address, it kinda of works...parts of the website don't come up. I really think I there is something like a hairpin or u-turn that needs to be done. Oh by the way this is my first real experince with an ASA. The Symantec Gateway they had worked great. I looked in the config and there were no hairpin or crazy rules, just the standard port forward for 80. Any ideas? I have tried several suggestions i found on the web, but none have worked.
Thanks
Nick

Hi,
The main problem with such setup (from the ASAs perspective) is usually that the NAT for the server is configured from certain source interface towards some destination interface.
You might for example have this configuration
object network WEB-SERVER
host 10.0.0.3
nat (inside,outside) static interface service 80 80
This would enable connectivity from the behind "outside" interface towards which the translation is configured but not from behind "inside".
I am not sure how different vendor firewalls handle this situation if you say that you only had the original Static PAT configuration towards the external interface.
If you wanted to enable connectivity to the public IP address from your LAN you would have to make a NAT towards the "inside" interface from the "inside" interface. And thats not all. You would also have to configure Dynamic PAT for the source hosts on the LAN behind "inside". The reason for this is that the ASA needs to see the whole TCP conversation between the client/server and since we PAT all the users to the ASA "inside" interface IP address that makes sure that ASA sees the whole conversation between the hosts.
So you could try this configuration on the ASA
object network PUBLIC-IP
host
object network WEB-SERVER
host 10.0.0.3
object network LAN
subnet
nat (inside,inside) 1 source dynamic LAN interface destination static PUBLIC-IP WEB-SERVER
The above configuration would essentially look for connections coming from behind "inside" interface from the source address belonging to LAN to the destination IP address of PUBLIC-IP and proceed to UN-NAT the PUBLIC-IP to WEB-SERVER and PAT the source address to "interface" (inside interface IP address)
You would also perhaps needs to add this command
same-security-traffic permit intra-interface
This enabled the ASA to pass traffic through the same interface that the traffic arrived in. So basically do that Hairpin/U-turn
You can check the current configuration with the command
show run same-security-traffic
Do notice that there is a similiar command with a different parameter at the end (inter-interface vs. intra-interface). So check that you have the correct one.
Hope this helps
Let me know how it goes
- Jouni

WAAS 4.1.15b and two windows domain

Hi
I have two data centers and two windows domains (lets call them X and Y)- in data center X I have to WAE - CM and Core, in date center Y I have one configured as Edge and Core as well (peple in data senter Y have to access to resources in doman X).
In all remote offices are WAEs configured as Edge. Ale WAE are added to domain X.
All prepositions in domain X works fine.
I have created secound CoreCluster for domain Y, added WAE in date center Y as Core and one WAE in remote office as Edge to this CoreCluster, but preposition doesn't work.
On Edge WAE In logs /local1/logs/actona/RxLogging.log i can find only this:
[2010-03-25 14:35:58,765][ INFO] - Preposition ID 929205 started on \\serverY\testfolder\.
[2010-03-25 14:39:59,303][ INFO] - Prpositioned files under \\serverY\testfolder\ (task 929205): File server disconnection - scanned 0 files, up
dated 0 files, 0 bytes 0 directories.
[2010-03-25 14:39:59,323][ INFO] - Preposition ID 929205 failed, reason: Completed with error(0 files with errors).
I can ping this serverY from this WAE.
The question is:
Is it possible to create preposition for two windows using this infrastructure ?
ps. I have to use lagacy services.
I hope that this is not so complicated
Thanks in advance
james

James,
Thanks for the log files. In the Tx.internal.log file, there is the following entry:
2010-04-15 12:08:28,952 WARN (actona.cifs.fsclient.FileSystemClient:1799) TP-1 - Terminating caller due to disconnect: error=13caller=TYPE_START_SESSION [cookie=null]
This message and error code means that the WAFS Core was unable to open a socket to the origin file server you are trying to preposition content from. Can you please verify the following from the CLI of the WAAS device running the WAFS Core service:
Verify name resolution - dns xchn.i.shadm
Verify IP connectivity - ping xchn.i.shadm
Verify TCP connectivity - telnet xchn.i.shadm 445
Thanks,
Zach

DNS conflict when running Open Directory Master inside of WIndows network..

We installed Snow Leopard Server as an Open Directory Master in a building that already has a Windows Primary Domain Controller. The intent was to create a Mac network inside of the building with their own services. The Mac server does not pull LDAP/Kerberos/etc. from the Windows server and the Mac clients do not use the WIndows server for any other services.
Everything (Final Cut Server, Open Directory, DNS, File Sharing) worked fine for a day. The next day, all of the windows machines were getting DNS conflict messages on their screens every 15 minutes. After shutting down the Snow Leopard Server, the Windows machines are back to normal.
Ideas?
Thanks!

Hi
Is it possible the Window's Administrators have added your server as a DNS Server in their DHCP Service for some reason unknown to you? Or possibly you've chosen an IP address that is listed as a DNS Server in their DHCP Service?
If you launch terminal from a client mac and issue the host command for the server's IP address what's the result?
+"we understood the Mac server has to be hosting DNS in order for Open Directory to function"+
DNS does not have to be running on the Server itself for any of the Services in OSX Server to function. Just as long as it can resolve itself on both pointers is all that matters. If it was the only server on the network then yes configure the Service. If there already is an existing and mature DNS Service then it makes sense to use it.
Tony

C370 control between internal email domains

Hi All,
I have a customer where they have a few internal mail servers and the mail server’s email gateway are pointed to the C370 ironport.
They have a special requirement where they would like to block certain users from one mail server to be communicating with a set of people in another mail server.
They also have requirements like certain users can only send email to other certain users in another internal email domain.
Example:
a) [email protected] can only email [email protected]
b) [email protected] cannot sent emails to [email protected]
What I did is create mail policies for each requirement. For a) what I did is “allow from [email protected] to [email protected]”; then “deny [email protected] to any email domain”. As for b), what I did was “deny from [email protected] to [email protected]”; then “allow from [email protected] to any email domains”.
My question is:
1. Do I apply these policies on the incoming mail policies or outgoing? Taking into consideration I have a 2-data port topology where data-1 is configured to face the internet (public) and data-2 is facing the LAN (private)
2. Will my mail policy work?
Many thanks.

Hi Andreas,
Because I want to block [email protected] to send email to [email protected] only, I will have to define specific policies that drops [email protected] to [email protected], then allow [email protected] to every other email. Something like firewall rules performing specific deny and allow any any at the last line.
I performed some internal testings and I realize that in order to specifically block from [email protected] to [email protected], I have to define sender = [email protected] in the outgoing mail policy and [email protected] in the outgoing mail filter under filter = envelope recipient; action = drop (or vice versa). Otherwise, if I place sender = [email protected] and recipient = [email protected] in the mail policy, any email from [email protected] OR to [email protected] will hit the policy.
I feel that this is kind of brainless to do such thing and will add operational complexity. Unfortunately, my customer has a very strict security environment. I did say the same thing to him. "Why don't control on the server end?". He replied "what if my servers get compromised?"
Hope you can understand my explanation Thanks.

Sponsor portal and internal users

Hi
I have configured on our ISE to use AD-users as sponsors. And this works perfect.
but I'm also trying to configure an internal user, for the sponsor portal.
I Have configured it almost the same way so i don't understand why the ISE is reporting :
Sponsor authentication has failed : Sponsorgroup not found for user
My identity store is a sequence for AD and internal users, and i can see from the log that it looks in the right place :
Identity Store:
Internal Users
My condition is that the internal user, should be a member of identity group : sponsorAllAccount
my identity group :
Identity Group:
SponsorAllAccount
and then get a created sponsor group, this sponsor grop that is allocated to the condition, works fine for det AD-users.
Evaluating Identity Policy
5435 Sponsor authentication has failed
any suggestions of why ? I'm now running the lastes 1.1.1 version.
Br
Tuva

Hi Tarik
thanks for the answer.
I'm certain that the user does not exist in the AD domain, anyhow, then my log would tell me that the authentication failed because of wrong password !?
I can se from the log that the ISE is doing lookup in the internal database.
this is output from he logging :
Identity Store:
Internal Users
I have ,made a identity store sequence with both AD and internal users.
Br
Tuva

Cloudflare Public DNS and Internal AD Domain DNS conflict?

Similar Messages

Maybe you are looking for