is it bad to make add DNS role to your server if u dont use a router?

[latrosicarius]

do u think my ISP will get pissed if I install the Active Directory Domain Services role, seeing that i dont have a router and i connect directly to their gateway, and use their DNS servers?

[Moby-Dick]

If you dont install local DNS then AD wont work properly.

All you need to do is set your local DNS server to use the ISP's one as a forwarder.

cleints will then reference your local DNS server and in turn your ISP's one

[latrosicarius]

thanks moby. do u have any tip on where to set up that option?

[Moby-Dick]

Its usually a prerequisite when you install AD

[Moby-Dick]

ah within DNS - form the DNS management console you shoudl be able to right click the server - select properties and look at the forwarders tab.

[Jay]

I do this at home. DNS is nice and snappy now

[latrosicarius]

ok i appreciate the response.

And another question on this: will this have the side-effect of allowing regular outside people from using my IP as a DNS server? (since there is no router)

[aidanjt]

Your gateway has a firewall right?.. Just use that to block queries. Or configure your DNS server to only respond to queries from your netmask.

[i4000]

ok i appreciate the response.

And another question on this: will this have the side-effect of allowing regular outside people from using my IP as a DNS server? (since there is no router)

You need to make sure the server is protected by a firewall, if it is then make sure that incoming port 53 (tcp & udp) is blocked. Any decent firewall will have a "block anything incoming" rule in there, but on cheaper ones you can be tripped up using insecure features such as a so called DMZ.

[latrosicarius]

there is no software or hardware firewall, no gateway. The computer connects directly to the modem. In the adapter's TCP/IP properties, I enter the gateway, DNS servers, & static IP address that my ISP provided me when signing up.

is that bad? lol. I suppose i *could* put a router on...

[Jay]

I would strongly advise the use of a router.

[i4000]

I would defintiely recommend a router, you can pick them up for as little as £14 from Scan.

If you really can't afford one then at least install a software firewall (although configuration will be complex due to your servers roles).