ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzakk_5.4.0.1/rzakkscenario2.htm

88 lines
5.8 KiB
HTML

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE html
PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html lang="en-us" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow" />
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="DC.Type" content="reference" />
<meta name="DC.Title" content="Example: Single Domain Name System server with Internet access" />
<meta name="abstract" content="This example depicts a simple subnet with a Domain Name System (DNS) server connected directly to the Internet." />
<meta name="description" content="This example depicts a simple subnet with a Domain Name System (DNS) server connected directly to the Internet." />
<meta name="DC.Relation" scheme="URI" content="rzakkexampleparent.htm" />
<meta name="DC.Relation" scheme="URI" content="rzakkscenario1.htm" />
<meta name="DC.Relation" scheme="URI" content="rzakkconceptdomainisp.htm" />
<meta name="DC.Relation" scheme="URI" content="../rzaj4/rzaj4secoverview.htm" />
<meta name="DC.Relation" scheme="URI" content="rzakkconceptquery.htm" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2004, 2006" />
<meta name="DC.Rights.Owner" content="(C) Copyright IBM Corporation 2004, 2006" />
<meta name="DC.Format" content="XHTML" />
<meta name="DC.Identifier" content="rzakkscenario2" />
<meta name="DC.Language" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<link rel="stylesheet" type="text/css" href="./ibmdita.css" />
<link rel="stylesheet" type="text/css" href="./ic.css" />
<title>Example: Single Domain Name System server with Internet access</title>
</head>
<body id="rzakkscenario2"><a name="rzakkscenario2"><!-- --></a>
<!-- Java sync-link --><script language="Javascript" src="../rzahg/synch.js" type="text/javascript"></script>
<h1 class="topictitle1">Example: Single Domain Name System server with Internet access</h1>
<div><p>This example depicts a simple subnet with a Domain Name System
(DNS) server connected directly to the Internet.</p>
<div class="section"><p>The following illustration depicts the same example network from
the single DNS server for intranet example, but now the company has added
a connection to the Internet. In this example, the company is able to access
the Internet, but the firewall is configured to block Internet traffic into
the network.</p>
<div class="fignone"><span class="figcap">Figure 1. Single DNS server with Internet access</span><br /><img src="rzakk501.gif" alt="Single DNS server with Internet access." /><br /></div>
<p>To resolve Internet addresses, you need to do at least one of the
following tasks:</p>
<ul><li>Define Internet root servers<p>You can load the default Internet root
servers automatically, but you might need to update the list. These servers
can help to resolve addresses outside of your own zone. For instructions for
obtaining the current Internet root servers, see <a href="rzakkconfigexternal.htm#rzakkconfigexternal">Access external Domain Name System data</a>.</p>
</li>
<li>Enable forwarding<p>You can set up forwarding to pass queries for zones
outside of mycompany.com to external DNS servers, such as DNS servers run
by your Internet service provider (ISP). If you want to enable searching by
both forwarding and root servers, you need to set the <samp class="codeph">forward</samp> option
to <span class="uicontrol">first</span>. The server first tries forwarding and then
queries the root servers only if forwarding fails to resolve the query.</p>
</li>
</ul>
<p>The following configuration changes might also be required:</p>
<ul><li>Assign unrestricted IP addresses<p>In the example above, 10.x.x.x addresses
are shown. However, these are restricted addresses and cannot be used outside
of an intranet. They are shown below for example purposes, but your own IP
addresses is determined by your ISP and other networking factors.</p>
</li>
<li>Register your domain name<p>If you are visible to the Internet and have
not already registered, you need to register a domain name.</p>
</li>
<li>Establish a firewall<p>It is not recommended that you allow your DNS to
be directly connected to the Internet. You should configure a firewall or
take other precautions to secure your iSeries™ server.</p>
</li>
</ul>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="rzakkexampleparent.htm" title="You can use these examples to understand how to use Domain Name System (DNS) in your network.">Domain Name System examples</a></div>
</div>
<div class="relconcepts"><strong>Related concepts</strong><br />
<div><a href="rzakkconceptdomainisp.htm" title="This topic provides an overview of domain registration, with links to other reference sites for setting up your own domain space.">Domain Name System domain setup</a></div>
<div><a href="../rzaj4/rzaj4secoverview.htm">iSeries and the Internet security</a></div>
<div><a href="rzakkconceptquery.htm" title="This topic explains how Domain Name System (DNS) resolves queries on behalf of clients.">Understanding Domain Name System queries</a></div>
</div>
<div class="relref"><strong>Related reference</strong><br />
<div><a href="rzakkscenario1.htm" title="This example depicts a simple subnet with a Domain Name System (DNS) server for internal use.">Example: Single Domain Name System server for an intranet</a></div>
</div>
</div>
</body>
</html>