Public & internal DNS for WSUS

[FN-GM]

Someone on here mentioned they had used a Public and an internal DNS for there WSUS server to keep all the laptops used outside of school updated. I cannot find the original thread. What ports do I forward for this feature? Is it port 80?

 

Thanks

 

Z

Edited April 13, 2008 by FN-Greatermanchester

[srochford]

You only need port 80.

 

What I'd guess you could do is use a group policy to set updates to come from WSUS.mydomain.sch.uk and then internally that resolves to an internal IP. Externally, it resolves to (say) your ISA server which then passes stuff through to the real WSUS server.

[powdarrmonkey]

Windows DNS servers can't do split DNS, where the same request resolves to two different addresses depending on whether you inside or outside of your boundary. For that you need something like BIND8 or 9.

 

But if the address you're using is available to both sides, WSUS's default ports are 80 (http) and 443 (https) if it is the only site on the server, and unless you changed them 8530 (http) and 8531 (https) if it isn't.