fairm010 Posted January 22, 2014 Posted January 22, 2014 We have HAP here and something has got me thinking. Our users use HAP in school for help desk, booking system etc. and use remote.school.co.uk. The requests go out t' internets to our webserver then back to internets then returns the results to the user. Is there a way I can redirect traffic to remote.school.co.uk using DNS so it goes straight to our webserver and not out to the web? I think what I've said makes sense! Ta Matt
mac_shinobi Posted January 22, 2014 Posted January 22, 2014 Not DNS related but put : remote.school.co.uk As an exception within IE settings via GPO so that it does not go through your proxy server out to the internet etc so its treated as a local intranet site Or do you need it to use dns to do that for other reasons ? Just a long shot / thought etc
fairm010 Posted January 22, 2014 Author Posted January 22, 2014 No need to use DNS but I that was to me the thing to do. At the moment internally staff are using https://webserver/hap but it throws a certificate error because it doesn't originate from remote.school.co.uk. That's what made me think DNS could maybe do this? Matt
mac_shinobi Posted January 22, 2014 Posted January 22, 2014 No need to use DNS but I that was to me the thing to do. At the moment internally staff are using https://webserver/hap but it throws a certificate error because it doesn't originate from remote.school.co.uk. That's what made me think DNS could maybe do this? Matt Add the https://webserver/hap to the trusted sites list via gpo or does it still give you that certificate error ?
twin--turbo Posted January 22, 2014 Posted January 22, 2014 we do it with our internal web servers by using DNS zone of school.co.uk on the DC with an a-record "remote" for the server as it's internal IP. Rob 1
mac_shinobi Posted January 22, 2014 Posted January 22, 2014 we do it with our internal web servers by using DNS zone of school.co.uk on the DC with an a-record "remote" for the server as it's internal IP. Rob Any chance of a screen grab ( you can blur out the ip addresses etc so I can see what you mean ) if that is ok Ta
fairm010 Posted January 22, 2014 Author Posted January 22, 2014 (edited) Scrap that, I've done it. @mac_shinobi 1) Open DNS on your DC and under forward lookup zones create a new zone. Name it school.co.uk 2) Go with all the defaults. 3) Create a new A record that looks like this. [ATTACH=CONFIG]22415[/ATTACH] That should do it! Edited January 22, 2014 by fairm010 1
mac_shinobi Posted January 22, 2014 Posted January 22, 2014 Coolio. Ive setup forward and reverse zones and know how to get dns working but not done much else with dns. Good to know
fairm010 Posted January 22, 2014 Author Posted January 22, 2014 Same here, though I've hit a snag. It works on my DNS servers when I browse to remote.school.co.uk/hap but when I do it on a client it doesn't work. Strange!
howartp Posted January 22, 2014 Posted January 22, 2014 Are your clients looking to internal DNS servers, or going straight to firewall/internet? I've got the DNS zones like you, but I also have duplicate entries in our Smoothwall because some VLANs don't look to the DNS servers. Peter
fairm010 Posted January 22, 2014 Author Posted January 22, 2014 All my clients look at internal DNS server1 and server4. I've checked DNS and my new zone has propagated over. I think I'm being stupid here and missing something obvious!
mac_shinobi Posted January 22, 2014 Posted January 22, 2014 (edited) All my clients look at internal DNS server1 and server4. I've checked DNS and my new zone has propagated over. I think I'm being stupid here and missing something obvious! Ipconfig /flushdns Try again. Dont you get the option to stop n start dns so it re loads all of it or something like that * shrugs * Edited January 22, 2014 by mac_shinobi
fairm010 Posted January 22, 2014 Author Posted January 22, 2014 Told you I was being stupid. I had been allowing https://webserver/hap in the proxy bypass but hadnt changed it to https://remote.school.co.uk! 2
twin--turbo Posted January 22, 2014 Posted January 22, 2014 the proxy server will be doing dns for the browser. make sure you have remote.domain.xxx and the local IP as proxy exceptions. 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now