Web server & DNS's (W2K)

[MLucas]

I have three netservers with windows 2000.
One netserver is for internal use and the other two for a external use. All three have the same web, hardware configuration and software, except the TCP/IP, the exernal servers don't have configured DNS entries.
Ok, now the question is, why the external servers work slowly than the internal?
why if I configure the DNS's in the TCP/IP configuration, the servers work equally to the first?
is not supposed not needed to configure DNS in my external servers for security and performance?

Thanks for all.
Moisés Lucas .

[POBrien]

Are you running your own DNS servers or do you rely on someone else?

Patrick (http://www.winguides.com/forums/sendprivate.php?Cat=&User=POBrien&Board=&Number=&what=online&page=&view=&sb=&part=&vc=><font)</font color=green> /images/forums/icons/smile.gif
<a target="_blank" href=http://www.winguides.com/subscribe/?guide=registry>WinGuides</a>

[MLucas]

I am running my own DNS servers.

Moisés :)

[POBrien]

Are these external servers outside of your firewall? At a remote location? Why don't you give us the entire detailed setup and maybe we can assist further.

[MLucas]

Ok, sorry for not to give all the information, my english is not very good to explain all my configuration, I'll try it.

We have two firewalls, my external servers are in the middle of the two. The more external firewall is a PIX of cisco, it only permits data from a specific range of ports. The second firewall (to stop comunications with the user's PC's) is a Machine of SUN with FireWall-1 and a set of restrictions to access internal PC's of the organization, supervise connections, log errors, etc.
All the servers, Firewalls, etc... are in a building, all in a private LAN and only the PIX Firewalls has public IP's.

Moi

[POBrien]

If you have a firewall that is protecting the two external servers I don't see the harm in config'ing them with the IP address of the internal DNS server.

[MLucas]

The warm is:
- the external Firewall can not be configured, it only can block certain ip's or ports, so there is not a big security in the two external servers
- It's supposed not needed to configure the DNS's in these machines
- the connection speed of the users connecting from internet is a little fewer
- I wanted to configure the server properly and know the reasons of this strange comportament
- I wanted to know what is trying to do the servers to do the conection with a client from internet that wastes 5 seconds more if I don't configure the DNS's. And then, why don't wastes 5 seconds when I configure the DNS's.
(Always having in mind that I don't need DNS's in this servers to run properly)

Is a question of work, I want to configure the best I can these servers before they will be in production.

Moi.
(thanks for the patient you are having with me) ^_^

[POBrien]

how about using the LMhosts file on each of the external servers. The LMhosts entries will contain the ip and machine name entries of the internal DNS server.

The file resides in the winnt folder. Can't get much more secure than that.

http://www.google.com/search?hl=en&q=lmhosts+file&btnG=Google+Search

Pat

[MLucas]

I am trying to configure the LMHOST to test this configuration.
I am still annoyed in a question, why these bad time to resolve the ip's or to make the connections?
I don't understand what is making to slow the connectivity.
The external web servers are in another domain than the rest of the users and PDC server and DNS servers, this may be the problem?

Moi. ^_^

[POBrien]

I understand. I think at this point I'll stop here. I wouldn't be of any more help to you unless I was at your actual location.

Good luck.

Pat

[MLucas]

Thanks Pat

:)