jblackburnHWGA Posted February 28, 2023 Posted February 28, 2023 (edited) I've got to the point where i can now switch off all my servers. Any ideas or advice on what to do with DNS for internal use? Currently they're on the domain controllers. Do need an internal dns? if yes what do i replace it with? Edited February 28, 2023 by jblackburnHWGA
FN-GM Posted February 28, 2023 Posted February 28, 2023 (edited) Do need an internal dns? There isn't enough information to answer this. DNS is used even without on-premise servers. For example, it can be used for Unifi devices to point it to the controller. What do i replace it with? What do you use for your Firewall? May products provide DNS facilities. I would probably set this up anyway so you're good to go should you need it. Edited February 28, 2023 by FN-GM
djm968 Posted February 28, 2023 Posted February 28, 2023 If you are a Microsoft organisation - Azure DNS? https://azure.microsoft.com/en-gb/products/dns
jblackburnHWGA Posted February 28, 2023 Author Posted February 28, 2023 I am. I didn't notice this before! its obviously an added extra to my A3 license
gszech Posted February 28, 2023 Posted February 28, 2023 We are moving towards serverless school. My plans are to completely remove DC servers, use Google Credential Provider for Windows and host DNS server on a firewall.
jblackburnHWGA Posted February 28, 2023 Author Posted February 28, 2023 Thats a point i wonder if we can use our smoothwall filter and firewall as the dns
jslate1980 Posted February 28, 2023 Posted February 28, 2023 Thats a point i wonder if we can use our smoothwall filter and firewall as the dns The smoothwall should be able to do that, we have our S9 providing dhcp and dns for our guest wi-fi network. How are you going to handle ip addressing?
jblackburnHWGA Posted February 28, 2023 Author Posted February 28, 2023 We’re pushing dhcp through our core switch, we have a fancy expensive one as part of a new school build. I should look in dns on the core switch as well. I’ll definitely be asking smoothwall about dns, we have an s10
jslate1980 Posted February 28, 2023 Posted February 28, 2023 We’re pushing dhcp through our core switch, we have a fancy expensive one as part of a new school build. I should look in dns on the core switch as well. I’ll definitely be asking smoothwall about dns, we have an s10 In that case there must be a way to setup dns forwarders to point to your smoothwall from the core switch.
psydii Posted February 28, 2023 Posted February 28, 2023 DNS should be provided by your filtering platform. We have AD DNS, and it forwards to our filter providers DNS service. If we ever got the point where we were removing AD, we'd just point the clients at the servers AD currently uses as its upstream DNS.
Oaktech Posted February 28, 2023 Posted February 28, 2023 We're keeping a single microserver on site to provide DHCP, DNS, Xibo content, police Cyber alarm and, temporarily, a print server until we move to Uniflow Hosted over the summer. We have a further plan to remove that completely as well with the DNS/DHCP functions being moved to filtering platform, Xibo being moved to YoDeck, Cyberalarm being moved to a spare PC and Uniflow Hosted taking over printing. This is only not happening staright away because of timescales and budgets.
jblackburnHWGA Posted February 28, 2023 Author Posted February 28, 2023 I was considering the same just on a temp basis. Just hosting on something smaller so i can switch off the big stuff (which currently isn't being backed up properly). I've just moved to uniflow last week. Its genuinely fantastic everything Papercut can do but fully cloud. All its missing is groups sync from azure which i'm told is being added soon so you might have it by the summer. Staff have adapted to it really quickly, just got to add in students next. 1
mavhc Posted February 28, 2023 Posted February 28, 2023 We're keeping a single microserver on site to provide DHCP, DNS, Xibo content, police Cyber alarm and, temporarily, a print server until we move to Uniflow Hosted over the summer. We have a further plan to remove that completely as well with the DNS/DHCP functions being moved to filtering platform, Xibo being moved to YoDeck, Cyberalarm being moved to a spare PC and Uniflow Hosted taking over printing. This is only not happening staright away because of timescales and budgets. https://paul.reviews/tag/cyberalarm/ Meanwhile the DNS question is just: do you need DNS for internal things? If not set it to a public DNS server
Oaktech Posted February 28, 2023 Posted February 28, 2023 https://paul.reviews/tag/cyberalarm/ Meanwhile the DNS question is just: do you need DNS for internal things? If not set it to a public DNS server It's a requirement of our RPA membership and a compliance point from our MAT. I'm just doing as I'm told.
jblackburnHWGA Posted February 28, 2023 Author Posted February 28, 2023 well yes can't i just set dns as 8.8.8.8? I have a preset smoothwall rule that denies 8.8.8.8 and 8.8.8.4 so there must be some security reason to it
mavhc Posted February 28, 2023 Posted February 28, 2023 That's to stop kids changing their own dns, when you've set one that's filtered. All Members must register with Police CyberAlarm: Registering will connect Members with their local police cyber protect team and in the majority of cases, a cyber-alarm software tool can be installed for free to monitor cyber activity You MUST register, but you CAN install it
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now