How to setup DNS on RODC

Hi i've recently setup a RODC for a branch office without DNS server role; however now i need to add the role how should i setup the DNS so it is able to retrieve from a RWDC with AD integrated DNS.
Thks for any info

Hello,
I would agree with Brian.
Install DNS as a role on the RODC should be enough. Once installed, your AD integrated zones will be replicated to it.
Just one thing is that the DNS zone will be read-only.
This
posting is provided "AS IS" with no warranties or guarantees , and confers no rights. 
Microsoft Student
Partner 2010 / 2011
Microsoft Certified
Professional
Microsoft Certified
Systems Administrator: Security
Microsoft Certified
Systems Engineer: Security
Microsoft Certified
Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified
Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft Certified
Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows 7, Configuring
Microsoft
Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
Microsoft Certified
IT Professional: Enterprise Administrator
Microsoft Certified IT Professional: Server Administrator
Microsoft Certified Trainer

Similar Messages

  • How to setup DNS behind Airport Extreme and ISP that will not reverse DNS

    Hi,
    I am having issues setting up my Mac Mini with SLS. Right now my server is connected to the internet through my Airport Express. It gets a static address from the router (10.0.1.13). The router also has a static address from my ISP. I own the domain redcedarpoint.com. I have set the A record to point to my static router IP address. I also setup a CNAME for server.redcedarpoint.com to the same address.
    During the initial portion of setup SLS sees my ISP's domain versus my own domain and incorrectly fills the local domain name. I manually changed these to redcedarpoint.com and called the server 'server'. This puts server.redcedarpoint.com into all the host names. Everything seems to work, but now all my users get email addresses like [email protected] versus [email protected]. I have manually set mail host name to redcedarpoint.com (although this is wrong I think). It solves the email addressing issue, but now postfix gives me a warning about a duplicate:
    +Jan 27 21:20:45 server postfix/postmap[70670]: warning: /var/amavis/local_domains.db: duplicate entry: "redcedarpoint.com"+
    My question is: What should I fill in during setup and how should I setup DNS from my hosting service.
    By the way, I am also trying to funnel all inbound and outbound email through my premium Google Apps subscription.
    Here's also the result of postconf -n
    +Last login: Wed Jan 27 21:19:47 on ttys000+
    +server:~ ianknight$ postconf -n+
    +biff = no+
    +command_directory = /usr/sbin+
    +config_directory = /etc/postfix+
    +content_filter = smtp-amavis:[127.0.0.1]:10024+
    +daemon_directory = /usr/libexec/postfix+
    +debugpeerlevel = 2+
    +enableserveroptions = yes+
    +header_checks = pcre:/etc/postfix/customheaderchecks+
    +html_directory = /usr/share/doc/postfix/html+
    +inet_interfaces = all+
    +mail_owner = _postfix+
    +mailboxsizelimit = 0+
    +mailbox_transport = dovecot+
    +mailq_path = /usr/bin/mailq+
    +manpage_directory = /usr/share/man+
    +mapsrbldomains =+
    +messagesizelimit = 10485760+
    +mydestination = $myhostname, localhost.$mydomain, localhost, dmcwatering.com, internationalcardio.com+
    +mydomain = redcedarpoint.com+
    +mydomain_fallback = localhost+
    +myhostname = redcedarpoint.com+
    +mynetworks = 127.0.0.0/8,216.239.32.0/19,64.233.160.0/19,66.249.80.0/20,72.14.192.0/18,209.8 5.128.0/17,66.102.0.0/20,74.125.0.0/16,64.18.0.0/20,207.126.144.0/20,173.194.0.0 /16+
    +newaliases_path = /usr/bin/newaliases+
    +queue_directory = /private/var/spool/postfix+
    +readme_directory = /usr/share/doc/postfix+
    +recipient_delimiter = ++
    +relayhost =+
    +sample_directory = /usr/share/doc/postfix/examples+
    +sendmail_path = /usr/sbin/sendmail+
    +setgid_group = _postdrop+
    +smtpsasl_authenable = yes+
    +smtpsasl_passwordmaps = hash:/etc/postfix/sasl/passwd+
    +smtpdclientrestrictions = permit_mynetworks permitsaslauthenticated rejectrblclient zen.spamhaus.org permit+
    +smtpdenforcetls = no+
    +smtpdhelorequired = yes+
    +smtpdhelorestrictions = rejectinvalid_helohostname rejectnon_fqdn_helohostname+
    +smtpdpw_server_securityoptions = cram-md5,gssapi,login+
    +smtpdrecipientrestrictions = permitsaslauthenticated permit_mynetworks rejectunauthdestination checkpolicyservice unix:private/policy permit+
    +smtpdsasl_authenable = yes+
    +smtpdtlsCAfile =+
    +smtpdtls_certfile =+
    +smtpdtls_excludeciphers = SSLv2, aNULL, ADH, eNULL+
    +smtpdtls_keyfile =+
    +smtpdtlsloglevel = 0+
    +smtpduse_pwserver = yes+
    +smtpdusetls = no+
    +unknownlocal_recipient_rejectcode = 550+
    +virtualaliasmaps =+
    +server:~ ianknight$+

    The first one is easy...
    Jan 27 21:20:45 server postfix/postmap70670: warning: /var/amavis/local_domains.db: duplicate entry: "redcedarpoint.com"
    You have redcedarpoint.com set as both the domain name and the hostname of the server. That is not correct:
    mydomain = redcedarpoint.com
    myhostname = redcedarpoint.com
    In this case, myhostname should be the reverse DNS hostname that the recipient mail server would see on outgoing mail - typically this would be something like 'mail.redcedarpoint.com
    You should also fix the mydestination parameter so that it includes your domain name as well:
    mydestination = $myhostname, localhost.$mydomain, localhost, dmcwatering.com, internationalcardio.com
    mydestination identifies the domains this server accepts mail for. In this setup it will accept mail addressed to @mail.redcedarpoint.com (assuming you fix myhostname, as above), @localhost.redcedarpoint.com, @localhost, @dmcwatering.com and @internationalcardio.com
    Nowhere here does @recedarpoint.com appear, so users won't get mail addressed to [email protected]
    It's easiest to just add redcedarpoint.com to the list of domains the server handles mail for.
    how should I setup DNS from my hosting service
    Your subject implies a reverse DNS question, but there's nothing in this post about reverse DNS. Other than that, you should have an MX record for your domain that points to the public IP address of your router.

  • How to setup DNS correctly

    Dear all,
    I'm trying to setup my first macmini-server correctly so that i can access files and ical chances of my coworkers when I'm on the road. After reading many posting I now it is important to set up the DNS correctly, as many things depend on this.
    Still I get this messages in the "Next Step"-pdf after the installation:
    http://dl.dropbox.com/u/427417/dns%20configruation.jpg
    This is my DNS-setup:
    - I have one static IP: 80.xxx.xxx.222
    - I made a A-Typ entry at my Domain-Registrar: miniserver.example.com => 80.xxx.xxx.222
    - My ISP made a PTR Entry in his DNS-Servers: 80.xxx.xxx.222 => miniserver.example.com
    Both are working when I test it with: http://www.mxtoolbox.com/
    And this is my hardware-setup:
    Modem => linksys 160N-Router with public IP 80.xxx.xxx.222 =>switch => 4 Macs and my macminiserver with a fixed internal IP (192.168.1.133 made with DHCP-Reservation on the Linksys Router). FTP-Portforwarding to 192.168.1.133
    What confuses me is the fact, that I can turn on FTP on the miniserver and access it from outside with a ftp-client using "miniserver.example.com" as the server name. For me this working FTP-connection looks like I have setup the Public IP/DNS things right? But why I still get the is message in "next Step"
    I'm glad about any reply which helps me to understand the this.
    Dietmar
    Message was edited by: dietmar
    Message was edited by: dietmar

    Dear MrHoffman
    Thank you for your answer. It looks like in your answer is everything I need to now. But as I'm not a professional I only understand your recommendations partially. Here are my thoughts about it:
    MrHoffman wrote:
    You'll usually want an external static IP and an external DNS domain that gets you to your firewall device, and then you implement a VPN at the firewall to connect to your LAN. The external DNS is (or static IP) is how you get connected to your firewall.
    I do have a external static IP: 80.xxx.xxx.222 and DNS domain: miniserver.example.com which both gets me to my firewall (within the linksys router). So I think I've got this part right?
    Within your LAN, here's [getting DNS going|http://labs.hoffmanlabs.com/node/1436]; but that's LAN-local stuff and useful for getting around once you have the VPN connected. You probably don't want to be serving public DNS; leave that to your ISP.
    And yes, Mac OS X Server does really want to have DNS for itself either running locally on the box or within other DNS server(s) in your environment, and that usually then gets extended to running DNS for the rest of your LAN.
    Setting up DNS on the Macmini Server for my local LAN will be my next task, but as this would be a to long post I would like to ask you in a extra post about this. As I understand from your answer, I do server public DNS at the moment, also I did not intend this !!!
    I generally encourage using an [external firewall-based VPN|http://labs.hoffmanlabs.com/node/275], as that approach simplifies the requirements here and particularly when you're using NAT as is typical. You VPN to the firewall, then the connection works like you're on the LAN.
    My linksys router supports VPN-Passthrough and server-admin has the VPN-Service. Will this two do what you are recommanding me. I know I have to read into VPN first, before digging questions into others.
    [ftp is nasty|http://labs.hoffmanlabs.com/node/530] in several dimensions (your credentials are exposed in cleartext, and it requires a fancy firewall or the ephemeral port range to be opened on one of the intervening firewall), and usually best avoided during debugging. ftp is older than the internet, and largely incompatible with firewalls. VPNs or sftp is usually a better approach (and because you can use certificates or such, you can reduce your exposure to brute-force password attacks or password sniffing), save for anonymous ftp access or file drops, and only get around to setting up ftp once you get the rest of your network working here.
    FTP was only for testing, as I thought it is a simple way to test access to my server.
    As for your confusion, in your zone-level settings, you have the name server referring to the name server itself as its forwarding entries; this definitely won't work. Look at my notes and specifically look for the details on setting up the forwarding entry for the zone. This is the zone-level display (your http://dl.dropbox.com/u/427417/dns1.png) and the nameserver: field. That needs to be your upstream DNS provider.
    As written before, Local-DNS is the next thing to do/learn for me. But I have to leave for now to support a friend with his Mac thank you for your answers
    Dietmar
    here are my screenshot when setting up the mac osx server:
    http://dl.dropbox.com/u/427417/networkname.jpg
    http://dl.dropbox.com/u/427417/Hostname.jpg
    Did I made something wrong here?
    Is the field "Primary DNS Name" for local or public DNS ?? I thought it is for public: miniserver.example.com

  • How to Setup DNS Name to point to the cloud service

    Hi Team,
    We have couple of Cloud Services deployed in our Azure Subscription. We want to provide custom DNS Name such that our cloud service will be accessible publicly as www.<Our Domain Name>.com instead of <Something>.Cloudapp.net.
    Thanks.
    Regards,
    Subhash Konduru
    Please remember to mark the replies as answers if they help and unmark them if they provide no help.

    Hi,
    You need to create a CNAME entry on your DNS provider of your Domain Name.
    Regards,
    Cordialement,
    Mickaël LOPES
    Blog : http://lopes.im 
      

  • How to setup a static ip address and DNS on airport extreme using the iOS Airport Utility?

    I am at a location that only has wired ethernet.  The ethernet connection has a specific  Static IP address, subnet, gateway, and DNS setting.  I cannot seem to find how to enter DNS settings using the Apple Utility on an iPad. HELP!!!

    First, I am assuming that you are trying to administer your AirPort base station for a static IP address using the iOS version of the AirPort Utility ... correct?
    If so, then to do so:
    Start the AirPort Utility app on the iPad
    Select your base station.
    Select Edit
    Select Internet Connection
    Select Static
    Enter the appropriate IP address information
    Select Done
    Sorry, it does not appear that direct input for DNS IP addresses is an available option with this version of the iOS AirPort Utility app. Not sure why this was not included.

  • How to setup three SharePoint sites on one server?

    Hello,
    How to setup three SharePoint sites on one server?  I have three sites like:
    http://site1
    http://site2
    http://site3
    And need to have them running up on one server. I recall some changes need to be done to the host file, but not sure.  Can you advise on what to change?
    Thanks,
    Paul
    Paul

    you need to make entries in DNS to get this done.
    check here:http://spshare.blogspot.com/2012/05/how-to-create-host-header-web.html
    nice blog with step by step explanation:
    http://thuansoldier.net/?p=1323
    Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

  • How to setup IPV6 boundary for SCCM 2012 R2 Primary Site?

    How to setup IPV6 boundary for SCCM 2012 R2 Primary Site?
    I have Direct Access implemented in my environment. I have Windows 8.1 machine connecting through direct access.
    I want to manage the windows 8.1 through SCCM. How do I setup IPV6 boundary. Can someone guide me through?
    Below are the Windows 8.1 client IP Configuration
    C:\Windows\system32>ipconfig
    Windows IP Configuration
    Wireless LAN adapter Local Area Connection* 3:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
    Wireless LAN adapter Wi-Fi:
       Connection-specific DNS Suffix  . : home
       Link-local IPv6 Address . . . . . : fe80::7466:11a5:39ed:ffb0%4
       IPv4 Address. . . . . . . . . . . : 192.168.1.5
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 192.168.1.1
    Tunnel adapter isatap.home:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . : home
    Tunnel adapter Teredo Tunneling Pseudo-Interface:
       Connection-specific DNS Suffix  . :
       IPv6 Address. . . . . . . . . . . : 2001:0:5ef5:79fd:1494:1339:93d6:439c
       Link-local IPv6 Address . . . . . : fe80::1494:1339:93d6:439c%9
       Default Gateway . . . . . . . . . :
    Tunnel adapter iphttpsinterface:
       Connection-specific DNS Suffix  . :
       IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000:e1a7:9cc8:c3c7:d819
       Temporary IPv6 Address. . . . . . : fd64:fc00:d17b:1000:206c:f857:ddbe:2f2b
       Link-local IPv6 Address . . . . . : fe80::e1a7:9cc8:c3c7:d819%10
       Default Gateway . . . . . . . . . :
    Below are the IPConfiguration details for Direct Access server
    C:\Windows\system32>PsExec.exe \\MURA01 ipconfig
    PsExec v1.98 - Execute processes remotely
    Copyright (C) 2001-2010 Mark Russinovich
    Sysinternals - www.sysinternals.com
    Windows IP Configuration
    Ethernet adapter Ethernet:
       Connection-specific DNS Suffix  . :
       IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:3333::1
       Link-local IPv6 Address . . . . . : fe80::b1ad:1c29:b4a:9125%15
       IPv4 Address. . . . . . . . . . . : 10.192.1.25
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 10.192.1.1
    Tunnel adapter Teredo Tunneling Pseudo-Interface:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
    Tunnel adapter isatap.{3D6A5E86-D85A-46C8-B69B-FFCF6D5D849C}:
       Connection-specific DNS Suffix  . :
       IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1:0:5efe:10.192.1.25
       Link-local IPv6 Address . . . . . : fe80::5efe:10.192.1.25%18
       Default Gateway . . . . . . . . . :
    Tunnel adapter 6TO4 Adapter:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
    Tunnel adapter IPHTTPSInterface:
       Connection-specific DNS Suffix  . :
       IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000::1
       IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000::2
       IPv6 Address. . . . . . . . . . . : fd64:fc00:d17b:1000:2552:e9f8:87d3:ed8e
       Link-local IPv6 Address . . . . . : fe80::2552:e9f8:87d3:ed8e%20
       Default Gateway . . . . . . . . . :
    ipconfig exited on MURA01 with error code 0.
    Below are the IPCONFIG Details for SCCM Server:
    C:\Windows\system32>PsExec.exe \\sccm01 ipconfig
    PsExec v1.98 - Execute processes remotely
    Copyright (C) 2001-2010 Mark Russinovich
    Sysinternals - www.sysinternals.com
    Windows IP Configuration
    Ethernet adapter Ethernet:
       Connection-specific DNS Suffix  . :
       Link-local IPv6 Address . . . . . : fe80::9f0:86f9:441d:bc07%12
       IPv4 Address. . . . . . . . . . . : 10.192.1.30
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 10.192.1.1
    Tunnel adapter isatap.{0749E47D-AE0A-4D47-9D37-BDDC848E56F6}:
       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
    ipconfig exited on sccm01 with error code 0.
    What will be the IPV6 values to configure boundary?

    Depending on how the clients connect use the IPv6 prefix of their 6to4, Teredo, and/ or IP-HTTPS tunnel. Just keep in mind that it could become a long list...
    My Blog: http://www.petervanderwoude.nl/
    Follow me on twitter: pvanderwoude

  • Amateur question - how to setup iChat service?

    "Make sure the user is a user or member of a group that's defined in the Open Directory search path of the iChat server."
    How do I verify this?
    I have created a user and the user is a member of the "chat server group", but I still can't connect to to the service.
    Help please! =)

    Hello buckster,
    I'm also trying to turn on a iChat Server and use it. The iChat service is apparently "E-Z" to turn on in Server Admin tool but something about the wording of "search path" for Open Directory users is throwing me.
    I'm not new Mac OS Server ( 3+ years ) nor to using Open Directory or WGM or Server Admin but I'm being tripped up in the setup of users. I can't seem to figure out "search policy" and "search path". I get the basic idea but I apparently do not understand the sequence of creating a Search Path so that iChat Server can be accessed.
    Basic Setup-
    DNS on
    LAN using 192.168.0.x
    192.168.0.1 - server.LANlocal_domainname.net
    WAN using 10.0.1.x (Wireless thru AirPortBase Station as Gateway and Firewall internet with port routing to 10.0.1.2 as needed. APB is the DHCP manager for Wireless) server.WANdomainname.com
    alias to ichat > server on both interfaces.
    DHCP on - Managing 192.168.0.x
    iChat on with Host Domains=ichat.LANlocal_domainname.net & ichat.WANdomainname.com
    Open Directory on >>>>Open Directory Master with LDAP Settings pointing to search base of the WAN based user group
    dc=server,dc=WANdomainname,dc=com
    (CHECKED) Enable Secure Sockets Layer
    Certificate: Default
    Binding
    NO CHECKS
    Security
    NO CHECKS
    Workgroup Manager: server.WANdomainname.com
    Authenticated as DirectoryAdministrator to directory
    : /LDAPv3/127.0.0.1
    I've got 23 users and 6 Groups that I have used for different kinds of things.
    Web Mail Access
    Website Access
    FileMaker Server Access
    Application Server Access
    etc.
    and now I'd like get iChat working ....
    I'm on the inside of a router (though that shouldn't matter, right?), no software firewall (Firewall Service is not On). For a start, all I'm trying to do is get two machines inside the LAN to chat with a Jabber client (iChat or Atrium). I keep getting indications that the server is not found.
    Sorry if this seem lame but I would really appreciate a step by step of the set up of two users, one that is on another machine that is not directly controlled by the setup of Open Directory and WGM an another that is not the iChat Search as a client (as well as the server). I'd don't need lots of explaination but it would be really helpful to have a click by click for user, group, search path.
    Thank You for your help.
    Terry
    Dual 1.25GHz PowerPC G4 1MB L3 cache - 2 GB DDR SDRAM   Mac OS X (10.4.7)   Server and Clients
    Dual 1.25GHz PowerPC G4 1MB L3 cache - 1 GB DDR SDRAM   Mac OS X (10.4.2)  

  • PAP2T - how to setup SIP proxy and codec on PAP2T

    Hello
    How to setup SIP Proxy server IP addres and codec settings on PAP2T ?

    Your question here appears related to or a continuation of this previous question — is this the case?
    Based on the previous posting, whatever information you're receiving from the vendor support folks appears rather garbled or confused, particularly based on that "The vendor mentioned that we need to route the DNS and get it working (forwarded) on port 80 and I'd tend to avoid them." comment over there.
    I'd ask the vendor for documentation and details (as on its face, a requirement for this proxy seems, well, somewhat questionable), but yes, you're probably in the Apache config files here, and probably using overrides and .htaccess if the site is low-volume, as that'll keep the changes isolated for testing.
    Out of curiousity, is this proxy project part of an attempt to get this package to accessible, but without the vendor actually having the package running on port 80?  (Got a pointer to the package?  We can check the docs, and see if we can translate the installation requirements into something useful on OS X Server.)
    Are you running 10.5 or 10.6?  Both are pretty old releases.

  • How to setup antispam correctly?

    I set anti-spam to true and do not fill in any of the rejectdomains, rejectsenders or rejectrecipients.
    when i use telent <ip> 25 to connect the smtp_in serivice
    it's failed.
    550 5.7.1 Spam check failed for your IP address
    If I set anitspam to false.It's all ok.
    why?
    And how to setup antispam correctly?

    I have struggled somewhat with the antispam settings, and find it a little confusing. Raffa is right when it comes to reverse DNS lookup. Reverse DNS must be configured by the originating ISP (where the physical connection goes), and has nothing to do with the "normal" DNS set up administered by the registrar for the domain name.
    This is possible when you know what network the user connects from. I find this to be a problem for users whith å portable PC connecting from different locations (home/office/travel), as normal user identification fails with the "Spam check failed for your IP address" error message.
    Has anyone successfully set up an OCS SMTP_IN that correctly allows users to send mail through this SMTP with the SPAM-check enabled? The documents in Metalink does not address my problem, as far as I can see.

  • How to configure DNS on RED HAT 5,4

    Hello Linux experts
    I'm need to configure dns service for Oracle RAC 11gR2
    For dns server, I'm using the hosts for RAC.
    How to configure DNS on RED HAT 5.4 ?
    Anyone have a manual for do this ?
    Best Regardss

    Regardless of whether your will find tools or perl scripts like h2n, or manage your configuration files directly, you will need to get yourself familiar with basic DNS concepts and terms. A DNS cluster is a number of nameservers that share DNS records. You may perhaps rather want to setup a DNS server system consisting of a master and slave DNS server for your authoritative zone (domain name) on each node, but also configure for DNS forwarding and perhaps caching to public DNS servers on the internet. You may want to configure primary and secondary DNS records on your client sides in /etc/resolve.conf, perhaps also using some round-robin or timeout options.
    I'm afraid Google will be your best friend. You may find below links helpful in your approach:
    http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_%3A_Ch18_%3A_Configuring_DNS
    http://tldp.org/LDP/lame/LAME/linux-admin-made-easy/domain-name-server.html
    http://www.redhat.com/magazine/025nov06/features/dns/
    http://www.chinalinuxpub.com/doc/www.siliconvalleyccie.com/linux-hn/dns-static.htm

  • Final Cut Server - How to setup a search by timecode within a production.

    I'm relatively new to FCS and trying to setup the structure necessary for our work environment. Does anyone know how to setup the ability to search assets by TC within a production by creating a timecode option in the asset filter? I found some default timecode options in lookups but not sure if they would meet the needs.

    You're off to a good start, assuming you can truly connect to your server within your private network.
    To get VPN working over a public network, you'll need to do the following:
    1.  Change your server from an automatically acquired IP address from DHCP, to a manual one.  In one of the steps below, you will forward VPN ports from your router at the firewall to your server's private IP address.  If your server's address gets changed by your DHCP server, then the forwarding won't work.  You can take the automatically assigned address it has now, and convert it to a manual one, keeping the same address.
    1a.  At your DHCP server (time capsule, for you), configure to reserver the IP address that is assigned to your server, so it can't dynamically assign some other device to that address by accident.
    2.  At your router/firewall (time capsule for you), manually forward the Ports used for VPN services to the intrnal IP address of your server.  I think apple's airport config utility makes this pretty self explanatory.
    3.  If you suspect there's any chance that your external IP address changes occassionally (many IPS's do this), then sign up for a service like DYN-DNS (free).  Once you have an account with them, you run the DYNDNS daemon on your server.  It will ascertain the external IP address of your network, and forward this info to the DYNDNS server.  when you try to connect to <youraccountname>.dyndns.org, it will automatically redirect you to the public IP address of your server.
    Once you do step 2 above, the public will begin probing your server.  It's remarkable how quickly it begins.  Use good passwords on your server.  Use a good shared secret for VPN.  Dont turn on any server services (ex., SSH) that aren't absolutely essential, and if you do, mae sure they have good passwords, and use RSA certificates for them if possible (turning off SSH password access completely).

  • How to  setup PO automated email

    Hi hussein/helios,
    Our client want to automate PO email to suppliers. Can you give me docs on how to setup/configure EBS PO module to connect to the email server?
    Thanks a lot in advance....
    MsK

    Hi yxes;
    I found this command to test email on linux>
    # cat test.txt| mail -s "test mail" [email protected]
    On linux we are using sendmail which is comes wiht linux. You have to make some adjustment on it to can send email
    Please follow below steps:
    1. edit /etc/mail/sendmail.cf << PART:
         # "Smart" relay host (may be null)
         DSulak.EXCHANGE SERVER NAME
    2. edit /etc/resolv.conf
         search EXCHANGE SERVER NAME
         nameserver 10.x.x << Dns server
    3. edit /etc/mail/ trusted-users and add below to this file
    root
    daemon
    uucp
    4. check services
         ps -elf|grep mail
    if its not running
         service sendmail start
    5. test to send mail
         mail -s "test" [email protected] < trusted-users
    Regard
    Helios

  • Setup DNS in Snow Leopard HELP!!!!!!!

    I would like to have step by step instructions on setting up DNS in Snow Leopard.
    Now I can setup DNS in Leopard Server with my eye's closed, but SLS is giving me
    trouble.
    The only service I have running at present is DNS.
    The problem is SLS what to enter in the nameservers zone field.
    I am using readsrv for the server name, when setup asks for a dns name I entered macbook.com
    So the final FQDNS should read readsrv.macbook.com.
    Also how does the Reverse DNS setup in SLS ???
    Leopard Server would automatically create this field, but I do not see this in SLS DNS Settings.
    I get this error in terminal.
    macbook:~ sls$ sudo changeip -checkhostname
    Primary address = 192.168.1.30
    Current HostName = macbook.com
    The DNS hostname is not available, please repair DNS and re-run this tool.
    Thank you all in advance, please help me out.
    Message was edited by: Mike Darland

    Here, you'll want to get a registered domain or use something severely unlikely to get issued as a real domain (host.mikedarland or some other such domain), unless you're tied in with the folks that have the macbook.com domain registered. Folks are activating new top-level domains (TLDs) like .travel. I'll refer to the domain and the zone example.com here, as this is an RFC-preferred domain name for (duh) an example domain.
    Get a good and restorable backup of your disk before you start.
    Launch Server Admin.
    Select the target server, select DNS, stop DNS.
    Select Settings.
    Select the forwarding server(s) as your upstream ISP DNS server(s).
    Select Zones.
    Clean out all of the zones you see there.
    Add a forward primary zone for example.com. (note that trailing dot), and select the DNS server for that zone as 192.168.1.30 or whatever the address of your host. (And as an aside, I'd get out of 192.168.0.0/16 just as soon as I could manage it, as that messes up VPN routing if/when you get there.)
    You'll get a reverse zone created gratis.
    Add an A record for hostnames; here using "hostname".
    For testing: aim one of your clients at the DNS server at 192.168.1.30 (or whatever the IP address) via explicit selection in Network Preferences or such. Aim dig hostname.example.com, and (presuming that kicks back an address), aim a dig -x w.y.y.z query to test the reverse translation.
    After you have it all working, aim your clients at the box via explicit specification for via DHCP setting. Do not reference the ISP settings directly.

  • How to setup multiple base station under one network?

    How to setup multiple base station under one network? I have 6 rooms but one airport base station makes really difficult to get good signal from every rooms. I wonder if I can setup multiple airport base stations talking to each other under the same network to build up the signal strength will help solve this problem. But, is it possible? How?

    One route would be to utilize a "roaming" network. In a roaming network, you would connect multiple AirPort Extreme Base Stations (AEBS) to the same Ethernet. Of course, this would require that your home is already wired for Ethernet.

Maybe you are looking for

  • How to print 4 to a page?

    Long time AW6 user, trying to use Pages 08. I wanted to mail merge, so got my customer data into Address Book, set up a Smart Group. Made a postcard size doc for a mailing, merged addresses into a text box. When I "defined" my page it was via Page Se

  • Customer payment  against invoices

    Dear friends . Please suggest me that is there any report in FI for customer payment against invoices Customer No     Name     Company Code     Fiscal Year     Invoice No     Invoce Posting Date     Invoice Amount     DZDoc No         DZ Amount     D

  • Can't add a file as an attachment in email

    I use internet explorer 11 I open my hotmail account and selcet New to send an email When I open the dropdown box 'insert' and selct files or attachments - the screen freezes and locks doen. It shold go to my documents foldr

  • Checking response in Asynchronous scenario

    Hi, I want to check the response message in the scenario that I implemented asynchronous message. Basically, in the trace I could only see this "Async processing: skip mapping of response". Is there anyway to find out what the response is? Thanks

  • Does JDialog setVisible create a new threaD?

    I am having a problem with my program and it seems that it may be because my call to JDialog setVisible is creating a new thread. In my program I have a JDialog which is a creation wizard that puts some specific files in the specified directory. Afte