Resolving external address when Active Directory Domain ends in .comWindows Active Directory naming best practices?Resolving DNS issues in an Active Directory Domain ending in .com instead of .localFind name of Active Directory domain controllerResolving DNS issues in an Active Directory Domain ending in .com instead of .localWhat is Active Directory Domain Services and how does it work?Active Directory DNS not resolving ANY queriesApex ANAME / ALIAS record in Windows Server 2012 R2 DNS ManagerSender address rejected: Domain not found - after Route 53 (Amazon AWS) changesIn windows server dns, how can I delegate example.com to an external name server?IP Address vs Name ServerWindows DNS with a pseudo secondary zonePublic DNS conflicts with Networks internal DNS

60s/70s science fiction novel where a man (after years of trying) finally succeeds to make a coin levitate by sheer concentration

Something that can be activated/enabled

My advisor talks about me to his colleague

I need a disease

What does this wavy downward arrow preceding a piano chord mean?

Should I decline this job offer that requires relocating to an area with high cost of living?

Pressure inside an infinite ocean?

Find the cheapest shipping option based on item weight

Where are the "shires" in the UK?

Can there be a single technologically advanced nation, in a continent full of non-technologically advanced nations?

Is there an idiom that support the idea that "inflation is bad"?

Why did the Apollo 13 crew extend the LM landing gear?

Why are UK Bank Holidays on Mondays?

Identifying characters

Does it make sense for a function to return an rvalue reference?

Appropriate certificate to ask for a fibre installation (ANSI/TIA-568.3-D?)

Proving n+1 th differential as zero given lower differentials are 0

Decoupling cap routing on a 4 layer PCB

Why aren't nationalizations in Russia described as socialist?

29er Road Tire?

Shutter speed -vs- effective image stabilisation

What is the solution to this metapuzzle from a university puzzling column?

Manager is threatening to grade me poorly if I don't complete the project

Nominativ or Akkusativ



Resolving external address when Active Directory Domain ends in .com


Windows Active Directory naming best practices?Resolving DNS issues in an Active Directory Domain ending in .com instead of .localFind name of Active Directory domain controllerResolving DNS issues in an Active Directory Domain ending in .com instead of .localWhat is Active Directory Domain Services and how does it work?Active Directory DNS not resolving ANY queriesApex ANAME / ALIAS record in Windows Server 2012 R2 DNS ManagerSender address rejected: Domain not found - after Route 53 (Amazon AWS) changesIn windows server dns, how can I delegate example.com to an external name server?IP Address vs Name ServerWindows DNS with a pseudo secondary zonePublic DNS conflicts with Networks internal DNS






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








-1















Prior IT support named a customer's Windows 2016 AD domain example.com instead of example.local, as I've always done it. The customer has an external Apache web server hosting www.example.com.



When a user browses to http://example.com or http://www.example.com it fails because that resolves to the server's LAN IP address.



How can I ensure that users can reach the external company web server?



(Different issue: Resolving DNS issues in an Active Directory Domain ending in .com instead of .local)










share|improve this question

















  • 2





    Please don't use .local - See serverfault.com/q/76715

    – HBruijn
    Apr 25 at 7:16











  • Perhaps Split-Brain DNS might apply to your situation. docs.microsoft.com/en-us/windows-server/networking/dns/deploy/…

    – twconnell
    Apr 25 at 18:15

















-1















Prior IT support named a customer's Windows 2016 AD domain example.com instead of example.local, as I've always done it. The customer has an external Apache web server hosting www.example.com.



When a user browses to http://example.com or http://www.example.com it fails because that resolves to the server's LAN IP address.



How can I ensure that users can reach the external company web server?



(Different issue: Resolving DNS issues in an Active Directory Domain ending in .com instead of .local)










share|improve this question

















  • 2





    Please don't use .local - See serverfault.com/q/76715

    – HBruijn
    Apr 25 at 7:16











  • Perhaps Split-Brain DNS might apply to your situation. docs.microsoft.com/en-us/windows-server/networking/dns/deploy/…

    – twconnell
    Apr 25 at 18:15













-1












-1








-1


1






Prior IT support named a customer's Windows 2016 AD domain example.com instead of example.local, as I've always done it. The customer has an external Apache web server hosting www.example.com.



When a user browses to http://example.com or http://www.example.com it fails because that resolves to the server's LAN IP address.



How can I ensure that users can reach the external company web server?



(Different issue: Resolving DNS issues in an Active Directory Domain ending in .com instead of .local)










share|improve this question














Prior IT support named a customer's Windows 2016 AD domain example.com instead of example.local, as I've always done it. The customer has an external Apache web server hosting www.example.com.



When a user browses to http://example.com or http://www.example.com it fails because that resolves to the server's LAN IP address.



How can I ensure that users can reach the external company web server?



(Different issue: Resolving DNS issues in an Active Directory Domain ending in .com instead of .local)







domain-name-system active-directory windows-server-2016






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Apr 25 at 6:11









jbbarnesjbbarnes

162




162







  • 2





    Please don't use .local - See serverfault.com/q/76715

    – HBruijn
    Apr 25 at 7:16











  • Perhaps Split-Brain DNS might apply to your situation. docs.microsoft.com/en-us/windows-server/networking/dns/deploy/…

    – twconnell
    Apr 25 at 18:15












  • 2





    Please don't use .local - See serverfault.com/q/76715

    – HBruijn
    Apr 25 at 7:16











  • Perhaps Split-Brain DNS might apply to your situation. docs.microsoft.com/en-us/windows-server/networking/dns/deploy/…

    – twconnell
    Apr 25 at 18:15







2




2





Please don't use .local - See serverfault.com/q/76715

– HBruijn
Apr 25 at 7:16





Please don't use .local - See serverfault.com/q/76715

– HBruijn
Apr 25 at 7:16













Perhaps Split-Brain DNS might apply to your situation. docs.microsoft.com/en-us/windows-server/networking/dns/deploy/…

– twconnell
Apr 25 at 18:15





Perhaps Split-Brain DNS might apply to your situation. docs.microsoft.com/en-us/windows-server/networking/dns/deploy/…

– twconnell
Apr 25 at 18:15










1 Answer
1






active

oldest

votes


















2














So using .com instead of .local is perfectly fine, preferable even. I would be running AD from a namespace like ad.company.com instead of the root to avoid issues like this, but overall, using a real TLD that you own is best practice for AD.



The only issue here is that the internal and external namespace are shared. You can get around the website issue by having iis on the DCs acting as a forward/reverse proxy to the external website. Suggesting putting that role onto a DC actually makes me feel queasy but it should work.






share|improve this answer

























    Your Answer








    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "2"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader:
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    ,
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );













    draft saved

    draft discarded


















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f964517%2fresolving-external-address-when-active-directory-domain-ends-in-com%23new-answer', 'question_page');

    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    2














    So using .com instead of .local is perfectly fine, preferable even. I would be running AD from a namespace like ad.company.com instead of the root to avoid issues like this, but overall, using a real TLD that you own is best practice for AD.



    The only issue here is that the internal and external namespace are shared. You can get around the website issue by having iis on the DCs acting as a forward/reverse proxy to the external website. Suggesting putting that role onto a DC actually makes me feel queasy but it should work.






    share|improve this answer





























      2














      So using .com instead of .local is perfectly fine, preferable even. I would be running AD from a namespace like ad.company.com instead of the root to avoid issues like this, but overall, using a real TLD that you own is best practice for AD.



      The only issue here is that the internal and external namespace are shared. You can get around the website issue by having iis on the DCs acting as a forward/reverse proxy to the external website. Suggesting putting that role onto a DC actually makes me feel queasy but it should work.






      share|improve this answer



























        2












        2








        2







        So using .com instead of .local is perfectly fine, preferable even. I would be running AD from a namespace like ad.company.com instead of the root to avoid issues like this, but overall, using a real TLD that you own is best practice for AD.



        The only issue here is that the internal and external namespace are shared. You can get around the website issue by having iis on the DCs acting as a forward/reverse proxy to the external website. Suggesting putting that role onto a DC actually makes me feel queasy but it should work.






        share|improve this answer















        So using .com instead of .local is perfectly fine, preferable even. I would be running AD from a namespace like ad.company.com instead of the root to avoid issues like this, but overall, using a real TLD that you own is best practice for AD.



        The only issue here is that the internal and external namespace are shared. You can get around the website issue by having iis on the DCs acting as a forward/reverse proxy to the external website. Suggesting putting that role onto a DC actually makes me feel queasy but it should work.







        share|improve this answer














        share|improve this answer



        share|improve this answer








        edited Apr 25 at 13:55

























        answered Apr 25 at 6:49









        Rob MoirRob Moir

        29.7k45183




        29.7k45183



























            draft saved

            draft discarded
















































            Thanks for contributing an answer to Server Fault!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f964517%2fresolving-external-address-when-active-directory-domain-ends-in-com%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            Wikipedia:Vital articles Мазмуну Biography - Өмүр баян Philosophy and psychology - Философия жана психология Religion - Дин Social sciences - Коомдук илимдер Language and literature - Тил жана адабият Science - Илим Technology - Технология Arts and recreation - Искусство жана эс алуу History and geography - Тарых жана география Навигация менюсу

            Club Baloncesto Breogán Índice Historia | Pavillón | Nome | O Breogán na cultura popular | Xogadores | Adestradores | Presidentes | Palmarés | Historial | Líderes | Notas | Véxase tamén | Menú de navegacióncbbreogan.galCadroGuía oficial da ACB 2009-10, páxina 201Guía oficial ACB 1992, páxina 183. Editorial DB.É de 6.500 espectadores sentados axeitándose á última normativa"Estudiantes Junior, entre as mellores canteiras"o orixinalHemeroteca El Mundo Deportivo, 16 setembro de 1970, páxina 12Historia do BreogánAlfredo Pérez, o último canoneiroHistoria C.B. BreogánHemeroteca de El Mundo DeportivoJimmy Wright, norteamericano do Breogán deixará Lugo por ameazas de morteResultados de Breogán en 1986-87Resultados de Breogán en 1990-91Ficha de Velimir Perasović en acb.comResultados de Breogán en 1994-95Breogán arrasa al Barça. "El Mundo Deportivo", 27 de setembro de 1999, páxina 58CB Breogán - FC BarcelonaA FEB invita a participar nunha nova Liga EuropeaCharlie Bell na prensa estatalMáximos anotadores 2005Tempada 2005-06 : Tódolos Xogadores da Xornada""Non quero pensar nunha man negra, mais pregúntome que está a pasar""o orixinalRaúl López, orgulloso dos xogadores, presume da boa saúde económica do BreogánJulio González confirma que cesa como presidente del BreogánHomenaxe a Lisardo GómezA tempada do rexurdimento celesteEntrevista a Lisardo GómezEl COB dinamita el Pazo para forzar el quinto (69-73)Cafés Candelas, patrocinador del CB Breogán"Suso Lázare, novo presidente do Breogán"o orixinalCafés Candelas Breogán firma el mayor triunfo de la historiaEl Breogán realizará 17 homenajes por su cincuenta aniversario"O Breogán honra ao seu fundador e primeiro presidente"o orixinalMiguel Giao recibiu a homenaxe do PazoHomenaxe aos primeiros gladiadores celestesO home que nos amosa como ver o Breo co corazónTita Franco será homenaxeada polos #50anosdeBreoJulio Vila recibirá unha homenaxe in memoriam polos #50anosdeBreo"O Breogán homenaxeará aos seus aboados máis veteráns"Pechada ovación a «Capi» Sanmartín e Ricardo «Corazón de González»Homenaxe por décadas de informaciónPaco García volve ao Pazo con motivo do 50 aniversario"Resultados y clasificaciones""O Cafés Candelas Breogán, campión da Copa Princesa""O Cafés Candelas Breogán, equipo ACB"C.B. Breogán"Proxecto social"o orixinal"Centros asociados"o orixinalFicha en imdb.comMario Camus trata la recuperación del amor en 'La vieja música', su última película"Páxina web oficial""Club Baloncesto Breogán""C. B. Breogán S.A.D."eehttp://www.fegaba.com

            What should I write in an apology letter, since I have decided not to join a company after accepting an offer letterShould I keep looking after accepting a job offer?What should I do when I've been verbally told I would get an offer letter, but still haven't gotten one after 4 weeks?Do I accept an offer from a company that I am not likely to join?New job hasn't confirmed starting date and I want to give current employer as much notice as possibleHow should I address my manager in my resignation letter?HR delayed background verification, now jobless as resignedNo email communication after accepting a formal written offer. How should I phrase the call?What should I do if after receiving a verbal offer letter I am informed that my written job offer is put on hold due to some internal issues?Should I inform the current employer that I am about to resign within 1-2 weeks since I have signed the offer letter and waiting for visa?What company will do, if I send their offer letter to another company