Internal and external DNS

Question

Hello Team,
I have an AD domain benjuma.co.ke with the DC being the DNS server and yet there is a website benjuma.co.ke hosted externally. I need the internal resources to access the external resources to access the website but it keeps referring to the internal domain. Hence website not accessible while within the domain. How can I make the internal resource access the outside website?

Answer 1

Sounds like you'll need a split brain deployment.
https://learn.microsoft.com/en-us/windows-server/networking/dns/deploy/split-brain-dns-deployment

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

@BenardOnyach- 1926Hi,

Thank you for posting in Q&A!

If the AD domain name and website are totally the same, you have the following options to chose:

1.Try to change the website into "www.benjuma.co.ke"

2.Install IIS role on DC, to redirect the Web request from "benjuma.co.ke" to "www.benjuma.co.ke" (however, for security, we don't recommand to install IIS on DC)

3.Create an empty A DNS record under the forward lookup zone of "benjuma.co.ke", to point to the IP of external website. (however, it will cause AD replication issues)

4.Change the AD domain name

Based on your situation, the easiest way is to modify the website code into "www.benjuma.co.ke". If there is no way to modify the website code, you can only consider changing the domain name.

This issue has been discussed before, but the results of the discussion are the same. You can look at similar posts on this issue:
https://serverfault.com/questions/526205/my-public-website-name-and-ad-domain-name-are-the-same-how-can-i-get-to-my-exte
https://www.dell.com/support/kbdoc/en-sg/000134402/dns-considerations-in-a-windows-environment-with-identical-internal-and-external-domain-names

Hope you have a nice day : )
Gloria

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
https://learn.microsoft.com/en-us/answers/articles/67444/email-notifications.html

Answer 3

Run this command on your DCs;

netsh interface portproxy add v4tov4 listenport=443 listenaddress=internalIP connectport=443 connectaddress=externalIP;

this command forwards the requests of your employees to reach the website externally, and use this if you dont have exchange on-premises, SharePoint....