DNS AD issues?

[Kristi2k]

I have a D-link DFL-80 firewall and Windows 2003 Server AD Domain.

When any user tries to log onto the domain, loading the profile takes about 3 minutes. It seems as though it can't find the DNS server (DC).

DHCP is not enabled on the DC, but is on the firewall. Here's the setup:

Firewall:
DHCP: enabled
IP of firewall: 10.0.0.5
IP range: 10.0.0.50 - 10.0.0.69
Subnet: 255.0.0.0
Domain name (there's an option for it) locallan.local
DNS Serv 1: DNS IP's for our DSL

DC:
DHCP: Not enabled
IP: 10.0.0.6 (static)
Subnet: 255.0.0.0
DNS: 10.0.0.6

I have the DNS node setup so AD would work. But, now that I have this new firewall, users cannot log onto the domain from the LAN. What could be the problem? The internet works fine.

 

[Kristi2k]

Well, I took out the DSL's DNS entry from the firewall DNS option and put in the DC's IP and it logs on much faster. It seems like the internet is kinda slow though.

Running an ipconfig on one of the clients, the gateway is set to the firwall, so i don't understand where the slow down would be...

 

[SectorZero]

You have to use your DC for DNS, or Active Directory won't work.
If your DC is the root DNS server on your domain, you will be able to forward DNS searches to your ISP's DNS server or you could use the root hints.

All your computers on your network must use your DC for DNS.

 

[Kristi2k]

I have the firewalls DNS settins set to point to the DC now and the logon issue is resolved. But the internet still seems slow at first when it's looking up a site...

What could be causing this?

 

[Kristi2k]

Anyone? I think it's some DNS thing, where if I go to Yahoo, it takes awhile to look up yahoo, or if I go here, it takes awhile to look it up, after everything loads fast.

How can I resolve this?

 

[SectorZero]

You are able to resolve names on the Internet, so I don't think it's a problem with your DNS
setup.

WHat kind of hard ware are you running your DC on? What apps and services are running?

What kind of router are you using?

Have you checked your event logs? Tested your Internet bandwidth(how fast is your Internet connection).

Need more info

 

[Kristi2k]

I figured out what the problem was, it was the Reverse DNS lookup on the DC. I removed it and it works fine now.