DNS Records Confused

Hi everyone,
I have did the transtion from Exchange 2007 to Exchange 2013.
My Exchange 2007 URLS were with mail.mydomain.com and hostname of the exchange 2007 server was mail.
I came up with Exchange 2013 with hostname mail1
mail : 192.168.1.10 (Exchange 2007)
mail1 : 192.168.1.15 (Exchange 2013)(all virtual directories i set to mail.mydomain.com)
After decommisioning Exchange 2007 i changed exchange 2013 server to the old ip of Exchange 2007
mail1 192.168.1.10
I created
A record mail pointing to 192.168.1.10(mail.mydomain.com)? is it right
Now i have two records mail and mail1 pointing to same ip 192.168.1.10
Autodiscover record pointing to 192.168.1.10(autodiscover.mydomain.com)? is it right
should my MX record be pointing to mail or mail1
Should i create an SRV recoard?
Please do guide me ,i am able to open Exchang admin center and owa web pages but i am not able to login.
For outlook or active sync, what should be the incoming and outgoing mail server(mail.mydomain.com or mail1.mydomain.com)
I want to use mail as used earlier with exchange 2007

The mail part of mail.mydomain.com for purposes of finding your mail server is not referring to the name of the server as in server1.mydomain.com so the name of your server is not important.
But your certificate should match whatever that is. So for example my mailserver uses webmail.mydomain.org on the certificate so this is what the internal and external DNS records are pointed to even though the server has a name completely
unrelated to that. Also, my internal domain is mydomain.local so I created a separate DNS zone internally for webmail.mydomain.org and put the A record (with the internal IP) for my exchange server in there.
So from internally when you look for webmail.mydomain.org you find the internal IP address of the exchange server and when externally looking for the same thing, webmail.mydomain.org you find the external IP address of the exchange server.
Since you have put the new server at the old server IP you should not have to change DNS records externally and if you have DNS configured internally you should not have to change those either.
You do not need srv or mx records internally. An mx record would be an external record to help people find your mail server on the internet but as I said, since you put the new server at the same IP, presumably you already have external
DNS and firewall settings to allow access.
What you need to do is set the virtual directory addresses and the Service Connection Point for the new server.
First verify your DNS by pinging mail.mydomain.com both internally and externally.
Internally it should resolve to 192.168.1.10. Externally it should resolve to whatever public IP provides external access through your firewall to the server sitting at that internal IP.
Set the SCP for the new server using EMS (this assumes that your internal ping results above worked correctly):
Set-ClientAccessServer -Identity mail1 -AutoDiscoverServiceInternalURI https://mail.yourdomain.com/autodiscover/autodiscover.xml
You said you already did this part below but you can verify or do it again.
Configure virtual directories for mail1.
Go to ECP and navigate to Servers >> Virtual Directories
Select mail1 then click the wrench
Add mail1 at the top and then enter mail.yourdomain.com
Back in the Servers >> Virtual Directories section of ECP click on the virtual directories one at a time and then click the edit pencil and copy and paste to make the internal URL match the external one.
Do this for OWA, ECP, ActiveSync, EWS and OAB. Skip autodiscover and powershell!
Once all of this is done your OWA would be accessed at
https://mail.mydomain.com/owa and your ecp would be accessed at
https://mail.mydomain.com/ecp from both inside and outside your organization.

Similar Messages

Dnscmd's OpenAcl option doesn't seem to change DNS record permissions

I'm creating DNS A records with dnscmd /recordadd, and I can't see a difference in the A record's permissions whether I use the OpenAcl option or not. Is this normal?
I was expecting with OpenAcl to see permissions similar to Write permissions for Authenticated Users or something. Instead I can't see any difference in the permissions at all and the permissions for non-admins are Read permissions for Everyone.
The DCs run win 2008 R2 SP1. The syntax I've been using for dnscmd.exe is:
dnscmd /recordadd mydomain.com mycomputer /aging /openacl A 192.168.0.123
I want to migrate from Infoblox DNS to AD-integrated. So I'm expecting to export to csv from Infoblox, reformat the csv file a bit and use dnscmd.exe to read the reformatted csv and create DNS records in AD. I'll also enable the option on the Windows computers
to register their DNS records.
I think that the records that dnscmd.exe creates in AD won't have permissions that allow the Windows computers to overwrite them unless I use the OpenAcl option. But OpenAcl doesn't seem to make any difference to the permissions. Very confusing! Thanks for
any help.

Thanks Kumar and sorry for replying so late. What you said is correct and what solved my problem was running Windows Update. I was testing using W2K8 R2 with SP1 but no updates after that. After I ran Windows Update, then creating a DNS record using dnsmd.exe
with the /OpenAcl argument did indeed set the permissions on the DNS record so that Authenticated Users could write to it.

DNS Records Questions - TXT Files

Hello everyone, I would like to preface this post with, this is my first time dealing with DNS records. However, the instructions seem a little confusing, so i would like your professional feedback.
Currently using Godaddy for hosting. Ill start with the instructions, then my set up, my result and my questions.
Instructions:
You will be adding two separate TXT entries to your DNS record - note - be sure that you do not add any carriage returns when copying the key, below:
First Entry (This is called the DKIM policy record):
Name: _domainkeyTXT: "t=y; o=~;"If your domain is 'foo.com', then the 'name' entry will look like this when it is displayed as: "_domainkey.foo.com"
Second Entry: (This is called the 'selector record' and includes a public crypto key):
Name: key1._domainkeyTXT: "k=rsa\; p=MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKQrQeUnNX/CQBIXWqeHc8lKl+EwhGKzPuDRbDjnN2Xzl8N4Fc2oQ6R+opnEM6U4x4p
3NggEyNg8Mp2W6oUYpAECAwEAAQ=="
If your domain is 'foo.com', then the 'name' entry for this will look like this when it is displayed: "key1._domainkey.foo.com"
That's it!
You can send a test message to a yahoo email address, then select Actions->View Full Headers in Yahoo
when you view the email. If you have configured DKIM correctly, the header information for the email will include a line similar to:
Authentication-Results: mta1084.mail.mud.yahoo.com from=mypinpointe.com; domainkeys=pass (ok)
Fisrt Entrey
Hostname: @
TXT Value: _domainkey.mydomain.com: t=y; o=~;
TTL: 1/2 hour
Second Entry:
Hostname: @
TXT Value: key1._domainkey.mydomain.com: k=rsa; p=MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKQrQeUnNX/CQBIXWqeHc8lKl+EwhGKzPuDRbDjnN2Xzl8N4Fc2oQ6R+opnEM6U4x4p3NggEyNg8Mp2W6oUYpAECAwEAAQ==
TTL: 1/2 hour
Results
1. a really long string of code, but when you search for it here is the result Doesnt say domainkeys=pass (ok):
Authentication-Results: mta1466.mail.gq1.yahoo.com from=giglinxusa.com; domainkeys=neutral (no sig); from=crapemyrtle.mypinpointe.com; dkim=pass (ok)
Questions
1. Should the TXT value include "", like they have it in the instructions?
2. In the first entry, should there be so many spaces after the .com: t=y
3. What are carriage returns? (assuming spaces)

Hello,
but I don't understand anything else then you will use Godaddy.
What is the aim of this? Connecting an email domain to your internal network or about web services? Please be more specific in your description what you are trying to achieve.
Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

Redirect public DNS record to url

I am looking for advise as to what to do. I want to take my mail.xxxx.com record and point it to a url such as http://something.some.thing/mail
Is this possible to do? It seems like I should be able to do this somehow.
cheers

Sounds like you're getting a little confused. There is no correlation between a DNS host entry and a URL - you can't have a DNS record that points to 'http://something.somewhere.net/mail'.
What you can do is point your DNS entry to an IP address of a server that's running a web server. Now when users enter your hostname in a web browser they'll connect to this server.
You then configure the web server to automatically redirect to /mail if that's where you want the user to end up. The process would be something like:
DNS: mail.somewhere.net -> x.x.x.x
Server x.x.x.x runs a web server.
Web server redirect / requests to /mail
Now a user can enter http://mail.somewhere.net/ and end up talking to http://mail.somewhere.net/mail/ thanks to the web server, not the DNS server.
To do this you'd add a line like:
Redirect / /mail/
to your web site configuration.

How many DNS record need to create in Internal & external DNS server for exchange?

Hi friends,
I recently installed Exchange Server 2010 in my organization for testing purpose and I've register a pubic ip too for exchange server on godaddy.com. How many
internal & External DNS records reqired to configure on external & Internal dns server so my all feature like Auto-discover, Activ -sync,& webmail start working perfectly.
It's my first time configuring exchange for a organization.
Thanks & Regards,
Pradeep Chaugule

Hi,
Just as what ManU Philip said, you need to create
Autodiscovery.domaincom and mail.domain.com for external dns server.
Generally, you configure your Exchange Servers as DNS clients of your internal DNS server.
Refer from:
http://technet.microsoft.com/en-us/library/aa996996(v=exchg.65).aspx
Best Regards.

How do I create a DNS record on my Mac Server?

How do I create a DNS record on my Mac Server?

The following is info that I found in another post that I have been trying to follow.
MrHoffman New England
Re: Configure DNS - OS X Server Next Steps
Feb 13, 2011 6:36 AM (in response to Jimbooooooo)
You're setting up internal DNS services, you referenced your ISP DNS servers and you should not have, and now those servers have no translations for your hosts. This is a common misconfiguration.
See [configuring DNS on Mac OS X Server|http://labs.hoffmanlabs.com/node/1436] for how to set up your internal DNS server.
And if there are any references to your ISP DNS servers here (within your client settings, within your server settings, your Airport settings, etc), then you're usually going to have DNS and connectivity problems. You're running a server now, so you'll be running your own services, and (particularly because of NAT here) referencing only your own DNS server(s).
You may be setting up external DNS (if and when you need that), but that should happen after you set up your internal DNS. The above article has a link to setting up external DNS, when you get around to that, if/when you need in-bound connections into your LAN.

How to create a DNS record for a domain itself (without a hostname)

Hi,
Normally, you can create a DNS record that points to the zone itself, e.g.:
@ 10800 IN A 196.197.200.201
How do you accomplish that on a Mac OSX Lion Server? The DNS requires you to enter a hostname and it does not accept "@" as the hostname as it normally appears in the zone file.
(manually modifying the host file does not work - I tried that ;-) )
Any help is appreciated
Thanks
Bjoern Dirchsen

Create either a blank record with a ., or a FQDN such as 'domain.com.' (note the trailing dot). Either of these should map to the domain name.

How do I setup a DNS record to point to an internal IP with a port.

I am trying to setup a DNS entry on my AD server to point to a web sever that I have setup to run certain services. All of these services run through IIS on port 82 for example service A is internally 192.168.0.1:82/info/login and service B is 192.168.0.1:82/tech/login.
I am trying to give these services easy to use names like for example info.mycompany.com and tech.mycompany.com so that it is easy to access for the employees but I am obviously missing something because I have had no luck setting up anything. My
company is still using SBS 2003 as it's AD and DNS server so I am working with flint and bear skin here.
I am also trying to do the same thing for the external access to these services but where as I have the internal address for these services I have the external static IP. When using the external IP with the port from outside the network everything
works fine but I would like for it to to have a simple name identical to the internal names but accessible from the outside. I frankly feel out of my depth on both of these issues and I would really appreciate any help that can be lent. Thank you.

You cant set a dns record (that would be used by a browser) to point to an ip and port, srv records can but that requires the application to look them up.
To have info.mycompany.com point to 192.168.0.1:82/info/login you
would add a cname or A record to the dns pointing to that IP, then in IIS you would assign that dns name to the host headers. Also in IIS you would need to use
URL rewrite plugin with this you would setup a redirect for that host header {HTTP_HOST} to point to that link.

What are the right DNS records to host more than one site on OSX Server (ML). My conf in Server.app looks right but one of my sites lands on the default server. Any suggestion?

I started using OSX Server on Mountain Lion a few days ago and it looks promising.
I do however measure my ignorance in DNS matters...
I defined two websites in addition to the the Default Server, so I have three names to deal with.
For argument's sake
- www.main.com is the default site
- www.sitea.com is the first site
- www.siteb.com is the second site
I define a virtual host for www.sitea.com and another for www.siteb.com
The resulting apache conf is what I would expect, I am pretty sure it is correct.
So I modified my DNS entries (they were A records) to point to my new OSX Server.
My result is:
- www.main.com shows the default site
- www.sitea.com shows the first site
- www.siteb.com shows...the default site
Any ideas?
Cheers

Thanks MrHoffman!
My problem ended up being a name but not in the DNS!...In Apache.
Your information allowed me to rule out possibilities and zoom in to the culprit faster.
I just report here the conclusion hoping it can help someone else.
When I installed OSX Server last week, I had in mind to principally run siteb.
During the initial install, this is what I must have entered and then forgot about it.
Then I defined my virtual hosts sitea and siteb and realised my machine was called siteb and changed its name to main to avaid a name collision. At which time I remember OSX Server telling me that changing the name could have consequences...But it apparently went ok, and it did except for one little thing.
The consequence was this:
in the main configuration file /Library/Server/Web/Config/apache2/http_server_app.conf the ServerName directive had remained siteb (instead of main). I manually updated it with TextEdit (could do vi from bash, its the same) and replaced siteb with main.
There is a way to detect it.
In Server.app, there is a "logs" panel, which displays all sorts of logs for everything including the websites.
Each website's logs are presented as "access" and "error" logs. The information was there, but I could not see it because the viewing window in remarkably small for so much information in raw text...
web logs are actually written to only two files in /var/log/apache2 (error.log and access.log)
I openned two bash windows and run tail -f on error.log in one and tail -f access.log in the other.
When I started the web service, apache threw a warning stating from mod_ssl saying that the certificate did not match the serve name...I the certificate was what I expected, I checked http_server_app.conf and found the ServerName directive that was not changed when I renamed my server...
Easily fixed when its found, but it can take a while to find.
BTW, I was using A DNS records for and it works, but I find your method of using CNAME records documents the administrator's intent better than with A records; I started to do the same. (A records a useful though, they can run a domain across multiple machines)
Cheers mate!

DNS record is not dynamically created in DNS Zone, when joining to DNS domain

hi
in my test lab i have deployed two virtual machines (both are windows server 2008 R2 enterprise).
on vm1 i have installed just DNS role (without Active directory) and created a primary non-ADintegrated zone.
on this DNS zone, i have enabled dynamic update set to
non-secure & secure .
now in my vm2 (as a DNS client) , i set the ip address of this DNS server as preferred DNS server and then in system properties, on the primary DNS suffix field, i entered the name of my DNS domain (mydomain.lab)& rebooted VM2, but the a record of this
client (vm2) is not registered (created ) in mydomain.lab zone.
i respect the record be created like the situations which we join a client to AD domain

Hi John ,
When registering DNS record ,client will send a SOA query to find the primary server of the zone .Then send register message to the server .
We can use nslookup to find the problem :
Open Command Prompt
type nslookup
type set type=soa
type zone name
1. If there is positive response ,check the name of
primary name server and the IP address of the server .
Its name should be vm1.mydomain.lab .If not ,edit the SOA record in the zone .
If no IP address ,edit NS record in the zone .
2. If there is no response ,check the SOA record in the zone .
We can manually delete and recreate the records to ensure there are right SOA and NS records .
Here is the guide for using nslookup :
Nslookup :
https://technet.microsoft.com/en-us/library/cc940085.aspx
Best Regards,
Leo
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Hi Leo, thanks for reply.
i did all steps you mentioned but still no result.
i put an screenshot of my desktop here , everything is shown here:

HTTPS, DNS and dynamically updating DNS records

Hello to you all, if you are able to help with a DNS problem that I'm having then please accept my thanks and appreciation in advance.
First some background information, I recently moved my server from my studio to my house where a new purpose built studio will soon be erected. At my old studio any requests for myurl.com came in via the IP (whether that be http, https, ftp etc) from the domain registrar and the router would send the request to the relevant port number whether that be 80 for http or 443 for https etc and all was well as this location had a fixed IP address. Unfortunately at my new location whilst I have a much faster connection I do not have a fixed IP. To get around this I have the following set up (not ideal for a business I know but perfectly OK for home hosting); I set up two psuedo nameservers at no-ip.com (ns1myurl.com and ns2myurl.com) which tracks the changes in my IP address and updates its records accordingly, my registrar then sends any requests to these 'nameservers' and no-ip then forwards it on to my server. So far so good.
The problem arises once the requests get to my server, whilst I have DNS set up, I can only recieve requests from a straight request to the server ie myurl.com will display the site without any problem, but if I then put a www in front of that or try to access the https part of my site (which is set up as a seperate site on the same server) then the server throws an error. I have tried to put an alias (CNAME) into the zone but it does not want to resolve the request. I have searched around but to no avail, I am totally new to DNS so am currently on a steep learning curve and fumbling around in the dark.
The first thing that I need to get working is the request to be resolved correctly and then (and this is where the real fun starts!) is to dynamically update the IP in the DNS records as the IP changes. I will probably have to get help in on this as I understand that this requires BIND of which I know nothing about, first though I'd like to get the pages to be served up correctly. Advice, hints, tips or links to tutorials all greatly appreciated. Full set up listed below.
Many thanks, David.
Xserve PPC G5 running 10.5.8 unlimited set up as standalone OD master
Xraid
APC UPS
CradlePoint MBR1200 Gateway router which acts as the DHCP
http://myurl.com and https://myurl.com set up as 2 seperate sites and located on the Xraid
Current DNS setup:
Primary Zone name: myurl.com with nameservers ns1myurl.no-ip.info and ns2myurl.no-ip.info and allow zone transfers in checked
Then
Name
Type
Value
myurl.com
Primary Zone
        ns1myurl.no-ip.info
        Machine
12.34.56.78 (external IP)
        ns2myurl.no-ip.info
        Machine
12.34.56.78 (external IP)
        myurl.com.
        Machine
12.34.56.78 (external IP)
        www.myurl.com.
        Alias
myurl.com.
With the reverse zone looking thus with allow zone transfers being checked
Name
Type
Value
56.34.12.in-addr.arpa.
Reverse Zone
        12.34.56.78
        Reverse mapping
        myurl.com.

Thanks for the reply Camelot, that part though I had already figured out. I now have this working, all I did was change the external IP to the internal one of the server with resolves with the .local machine name and all is working just fine (for now!). As long as I have primary zones set for each site and any alias or services set up on them then everything works well.. The real test will be when my ISP changes the IP, whilst my tests have proved successful the proof will be when they update the address.
Thanks anyway. David.

Problem sending mail to hostname with multiple IN A DNS Records

Hi there
I've been using the javamail API without problems for some 2 years now in the company I'm working for.
The problems started this week, when the hostname I'm using to send out mails via SMTP, now has multiple 'IN A' DNS records, but allthough all of them respond to a 'ping' only some of them (as of today) accepts a connection on port 25.
The problem is now, that I get random sending errors whenever the DNS lookup of hostname resolves to an IP where no SMTP server is listening on port 25.
I have the following questions:
First of all: Is there an RFC (or other standard behavior) that say a SMTP client should behave like that (throw an exception if the first connection of an round robin DNS lookup fails)? I known that real SMTP servers work more with DNS MX records to find an alternative server, if the first server is unavailable. But javamail is more like a SMTP client, not a fully blown SMTP server.
What is the best way to solve this problem (if the Mailserver/DNS guys aren't cooperative)? I saw that you can pass a custom SocketFactory via properties to javamail. So would the proper solution be to implement a custom SocektFactory, that resolves all the different IP addresses for a hostname, and only returns a Socket, to which address and port it actually could get a connection.
Sorry for my bad english
-Reto

Have you talk to your network or server administrator to find out why your server is only
accepting connections on some IP addresses, even though it's returning all of them via
DNS lookups? Seems like a mistake to me.
If, for some strange reason, this behavior is on purpose, your socket factory idea may
be the best approach.
Also check whether there is a different DNS name you can use for the server that will
resolve to the IP address where it will accept connections.

#554 5.4.4 SMTPSEND.DNS.MxLoopback; DNS records for this domain are configured in a loop ##

Hi,
This is my first post here.
My exchange server of late is facing a peculiar problem. I get the error message that I have posted below when sending mails to any outside domain. However when I restart the server the mails can be resend to the address without any issue. After a certain
time again the issue pops up upon which I am forced to restart the server again. I am running 2007 Exchange on Windows 2003.
Generating server: name.mydomain.com
[email protected]
#554 5.4.4 SMTPSEND.DNS.MxLoopback; DNS records for this domain are configured in a loop ##
[email protected]
#554 5.4.4 SMTPSEND.DNS.MxLoopback; DNS records for this domain are configured in a loop ##
Original message headers:
Received: from name.mydomain.com ([1xx.xxx.xxx.xx5]) by MHDMAILS.mouwasat.com
([1xx.xxx.xxx.xx5]) with mapi; Wed, 19 Oct 2011 08:56:29 +0300
From: <[email protected]>
To: <[email protected]>
CC: "Al Alami,Tareq" <[email protected]>
Date: Wed, 19 Oct 2011 08:56:27 +0300
Subject: RE:
Thread-Topic:
Thread-Index: AcyAQ5tu8z9CvBfdT5+1pcGQkk6x0AIuwczAAAGZjeABQyW5sAADeeJQAAETNDA=
Message-ID: <[email protected]>
References: <[email protected]com>
<[email protected]com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: multipart/related;
            boundary="_004_EEC8FA6B3B286A4E90D709FECDF51AA06C0588CA11namedomain_";
            type="multipart/alternative"
MIME-Version: 1.0

On Sun, 23 Oct 2011 15:05:15 +0000, Jobin Jacob wrote:
>
>
>Even af
>
>ter removing my domain from the send connector I continue to receive the error. I would like to say I do have a firewall, Cyberoam. However, it was the same configuration till now in the firewall. I did try Mx lookup and found the following.
>
>Could there be any other solution to this issue ?
Sure, but it's necessary to ask a lot of questions since none of us
know how your organization is set up.
I see you also have "Use the External DNS Lookup settings on the
transport server" box checked. How have you configured the "External
DNS Lookups" on the HT server's property page? Is there any good
reason why you aren't just using your internal DNS servers? If the
internal DNS servers are configured to resolve (or forward) queries
for "external" domains then there's no reason to use that checkbox. In
most cases checking that box is a mistake.
http://technet.microsoft.com/en-us/library/aa997166(EXCHG.80).aspx
The behavior you describe (it works for a while and then fails;
restarting the server returns it to a working state) sure sounds like
some sort of DNS problem.
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP

Creating a little GUI with adding DNS record functionality

Hi all,
Creating a DNS record (A record) is pretty straight forward in Powershell. I wonder if somebody knows how to create a little GUI with the powershell commands in the background to create DNS records.
For example something like a HTML form in where u can enter the DNS name, the Zone and the IPv4 address. Click Add and Powershell will add it on the background. I cannot find any good information on this when i google on it.
Thanks!

Hi Bennekommer,
I‘m writing to check if the suggestions were helpful, if you have any questions, please feel free to let me know.
If you have any feedback on our support, please click here.
Best Regards,
Anna
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Creating DNS record

Hi,
Our external facing web server was recently moved to an external hosting provider but when they set it up they set the address as Home - Dilworth School instead of Home - Dilworth School. There is a database backend to this and changing the name of the server would be a major undertaking. The problem is that any emails that are generated from within this website have links pointing to Home - Dilworth School. The company that manages our external DNS records have put in an appropriate record so people outside get sent to the right place but I cannot work out how to do this internally.
When I go to create a resource record in the DNS/DHCP management console it insists that I must fill in the owner name field so I am not sure how to get around this.
thanks
Keith

Thanks - that worked. Windows would not let me do it - tried to create a DNS key when I asked it to create a resource record. Running the DNS/DHCP management console directly on the server worked.

DNS Records Confused

Similar Messages

Maybe you are looking for