Exchange 2007 split domain?

[kai91]

I would like my exchange users to be able to access the url https://email.school.sch.uk but internally they cant. I have been told to do a dns split domain but this doesnt seem to work for me. Can anyone help?

Thanks

[VeryPC_Ed]

Add an A record for email.school.sch.uk in internal DNS to point to local exchange server ?

[kai91]

Add an A record for email.school.sch.uk in internal DNS to point to local exchange server ?

 

Thanks for the reply. We have tried this but this didnt work?

[VeryPC_Ed]

Cpould be cached dns polluting the lookup, clear DNS on local machine ipconfig/flushdns and then do tracert to url.

 

Could always clear dns cache on server.

[kai91]

Cpould be cached dns polluting the lookup, clear DNS on local machine ipconfig/flushdns and then do tracert to url.

 

Could always clear dns cache on server.

 

Thanks for the reply again we have also tried this but its still doesnt appear to be working

[VeryPC_Ed]

Can you post ipconfig and tracert results ?

[kai91]

hi there, right just redone it all again from Scratch.

 

So we have a external DNS ref of email.schoolname.county.sch.uk

and what we would like is to be able to access this internally.

"

 

The url email.schoolname.county.sch.uk is working fine externally.

 

a rookie when it comes to DNS, right so i've created a new zone called "schoolname.county.sch.uk" and added a Host A record with the for the name "email" and put the internal ip.

After that i can now ping the email.schoolname.county.sch.uk and it giving me the internal ip and less then 1ms responses.

Also i can nslookup the DNS and it gives me two entries first in the DNS server and then Email.schoolname.county.sch.uk which it again returns the correct internal ip.

Tracert gives me the email server internal name and the correct ip.

 

However if i browse to email.schoolname.county.sch.uk or https://email.schoolname.county.sch.uk

internet explorer cannot display the webpage (IE) and in Chrome i get Error 324 The server closed the connection without sending any data.

 

if i \\email.schoolname.county.sch.uk it gives me a log in box as if to access the shares.

 

any ideas, thanks

[kai91]

dont know if this has anything to do with it but if i use run \\email.schoolname.county.sch.uk and gives me a login box that i cant log in using as it doesnt accept local or domain logins, but i use \\severname or \\ip i get the servers shares.

 

thanks

[VeryPC_Ed]

If you try https://email.schoolname.county.sch.uk/owa does it make any diff

[kai91]

tried that, and no it wouldnt as we use default.asp to redirect that page.

[VeryPC_Ed]

Wondering if it is some form of binding to an i.p thats causing the issue (ala IIS website listening only on specific i.p) ?

[kai91]

Wondering if it is some form of binding to an i.p thats causing the issue (ala IIS website listening only on specific i.p) ?

 

There is no specific IP listed in IIS?

[kai91]

There is no specific IP listed in IIS?

 

If we create a dns refrence in the local zone and add .local to the url we are able to access it fine.

[VeryPC_Ed]

Hmm, I'm a bit puzzled.

 

Exchange isn't my forte and it's been a while since I played around with it and DNS (tried setting it up with ISA server a few years back and encountered the whole split dns stuff).

 

Are you using something like ISA/TMG on the network ?

[Ergo]

Hopefully this is a really simple issue but maybe not. reading through all of the above you have done the correct things for setting up and testing the DNS, but I wonder if you have a proxy server set for users to access the internet? If so you may need to add both the IP address and the domain name (email.schooname.county.sch.uk) to the proxy exceptions list so web browsers connect to it directly rather than the school proxy server?

 

Regards

 

Dave

[kai91]

right issue with the proxy bypass which does work. is we need to use the likes of phones and ipads etc via this address.

If i remove the proxy i can access the site. If i create the DNS entry for email.schoolname.county.sch.uk.local or email.schoolname.county.sch.uk.ourdomain i dont need to touch the proxy bypass or take out the proxy and the site works fine.

however if i just try and create email.schoolname.county.sch.uk it wont work.

 

Which is the url all devices are pointing too and works fine externally.

[kai91]

If we create the DNS entry as anything else such as email.school.county.sch.uk it will work fine it just wont work with the word email?

[Ergo]

If we create the DNS entry as anything else such as email.school.county.sch.uk it will work fine it just wont work with the word email?

 

Kai,

I'm sorry but I don't fully understand your question, but I think you mean - if you put "email.school.county.sch.uk" as a proxy exception will www.school.county.sch.uk still go through the proxy as normal? The answer to this is yes. Only if you put *.school.county.sch.uk as the proxy exception would you have a problem with other domain names.

 

The problem I can see here is one we have seen before. When you created the DNS zone for school.county.sch.uk and then created the A record for "email" with the internal IP address this results in other records for the domain not working. The solution here would be to duplicate other DNS records for your external domain in your internal DNS ie. create A records for "www" and other addresses that you use with the correct IP addresses (these would be external ones).

 

If that does not make sense please let me know and I will try to help further.

 

Regards

 

Dave

[kai91]

right after spending a few hours messing with different DNS entries, i can now get it to work on basiclly any other url

 

e.g i can get it to work "e-mail.schoolname.county.sch.uk" "webmail.schoolname.county.sch.uk"

for whatever reason it just will not do it on email.schoolname.county.sch.uk

 

but our external DNS is for email.schoolname.county.sch.uk. and in order for phones and ipad's etc to connect it needs to be the same as when internally on the wifi and also use them from home or on mobile data.

 

hence why i cant use a proxy bypass rule.

 

Anyone any ideas?