Posts Tagged IP

Bind IP to DNS service

We faced a problem with our DNS (link), that made me look deeper into its configuration.

Our server is Microsoft Server 2003 which runs two services FTP and DNS.

You can configure many IPs on a single network card, this is common with web servers running multiple sites. You can view the multiple IPs, in the Advance TCP/IP settings of your network card. Under the IP Settings tab.

For web services, in the IIS configuration you can assign each site an IP, because by default each site runs on the default port 80 (http), so if you want to run multiple sites on the same IP you need to assign different ports not used by other services. So to avoid all that and for end users to access directly through http default port, each site has an independent IP.

For DNS in Microsoft, if you go to the management console, there are some settings to which IP to listen to receive DNS requests and also, which DNS servers to trust to load records from. To know which IP the DNS is actually using, right click the DNS and select Launch nslookup, the IP that appears at the top of the command window is the IP binded to the DNS service.

What I came to notice, it’s the first IP in the IP addresses in the Advance TCP/IP settings.

Solution:

To overcome the problem, I faced in my previous post. I just removed theĀ  IP I wanted the DNS to use and added it again and it appeared on the top. And that solved the problem and I removed the IP used by the FTP from all our primary DNS settings.

In IIS settings, if you go to your FTP site, and see the properties, you’ll see the IP the FTP uses.

, ,

4 Comments

Why Static IPs?

There are many issues with dynamic IPs for stations providing services such as web, email, FTP, etc.

  • Can’t guarantee they’ll always keep the same IP.
  • Changes need to be reflected on the DNS, which may have been set so that hosts can automatically register themselves or not. DNS changes take time to be propagated to other servers.
  • Some applications need the IPs to be coded within them, if the IP is changed it has to be reflected as well.
  • Most importantly, when you configure the firewall, it’s for that specific IP, I personally haven’t seen a firewall where the host is configured with name only and DNS is used to lookup the IP.
Source Destination Service Action
Any Web Server Public IP http accept
  • For email, services, PTR records are created to verify that you are not a spammer and if you don’t own your IP block, you got it through an ISP which is the common case, PTR records for your IP block is pointed at their main DNS servers and not yours. So imagine the headache of everytime calling your ISP to change the public IP record. You may argue well only the private IPs are changed and mapped to the same public IP, you’d be amazed to know that some configure their public IPs direct on their servers.
  • DNS servers are configured with IPs only. Example, if you are looking for x.google.com, a list of their DNS IP addresses is added (ex: 216.239.32.10) in other root DNS servers for you to go there and retrieve the correct IP.

That’s what I came up with, there may be other reasons :)

, , ,

3 Comments