is it bad to make add DNS role to your server if u dont use a router?

do u think my ISP will get pissed if I install the Active Directory Domain Services role, seeing that i dont have a router and i connect directly to their gateway, and use their DNS servers?

If you dont install local DNS then AD wont work properly.

All you need to do is set your local DNS server to use the ISP's one as a forwarder.

cleints will then reference your local DNS server and in turn your ISP's one

thanks moby. do u have any tip on where to set up that option?

Its usually a prerequisite when you install AD

ah within DNS - form the DNS management console you shoudl be able to right click the server - select properties and look at the forwarders tab.

I do this at home. DNS is nice and snappy now :)

ok i appreciate the response.

And another question on this: will this have the side-effect of allowing regular outside people from using my IP as a DNS server? (since there is no router)

Your gateway has a firewall right?.. Just use that to block queries. Or configure your DNS server to only respond to queries from your netmask.

Quote:

---

Originally Posted by latrosicarius

ok i appreciate the response.

And another question on this: will this have the side-effect of allowing regular outside people from using my IP as a DNS server? (since there is no router)

---

You need to make sure the server is protected by a firewall, if it is then make sure that incoming port 53 (tcp & udp) is blocked. Any decent firewall will have a "block anything incoming" rule in there, but on cheaper ones you can be tripped up using insecure features such as a so called DMZ.

there is no software or hardware firewall, no gateway. The computer connects directly to the modem. In the adapter's TCP/IP properties, I enter the gateway, DNS servers, & static IP address that my ISP provided me when signing up.

is that bad? lol. I suppose i *could* put a router on...

I would strongly advise the use of a router.

I would defintiely recommend a router, you can pick them up for as little as £14 from Scan.

If you really can't afford one then at least install a software firewall (although configuration will be complex due to your servers roles).