what "Create a new DNS record for the server FQDN" means? - windows-server-2012

I'm trying to setup DirectAccess in Windows server 2012 R2, I'm following the step-by-step of this page
http://blogs.technet.com/b/canitpro/archive/2014/01/06/step-by-step-enabling-directaccess-in-windows-server-2012.aspx
In the step 2, how is this done?

Happy to help. Sorry I did not see this sooner.
1.On the internal network DNS server: On the Start screen, type dnsmgmt.msc, and then press ENTER.
2.In the left pane of the DNS Manager console, expand the forward lookup zone for your domain. Right click the domain, and click New Host (A or AAAA).
3.In the New Host dialog box, In the IP address box:
◦ In the Name (uses parent domain name if blank) box, enter the DNS name for the network location server website (this is the name that the DirectAccess clients use to connect to the network location server).
◦ Enter the IPv4 or IPv6 address of the network location server, and then click Add Host, and then click OK.
4.In the New Host dialog box:
◦ In the Name (uses parent domain name if blank) box, enter the DNS name for the web probe (the name for the default web probe is directaccess-webprobehost).
◦ In the IP address box, enter the IPv4 or IPv6 address of the web probe, and then click Add Host.
◦ Repeat this process for directaccess-corpconnectivityhost and any manually created connectivity verifiers.
5.In the DNS dialog box, click OK, and then click Done.
I will also modify the post to provide better direction.
Cheers,
AB

Related

Connect Only Domains Domain name to Netlify

I have registered a domain name in Only Domains website, it is provisioned,
Yet I am unable to link it to my Netlify project.
Steps I followed till now:
Went to Only Domains -> Domain Name -> DNS Settings
Clicked on: Delegate to Your Name Servers, then added 4 Host Names provided by Netlify (I did not add the IP address though, as they did not provide)
Yet, I am not able to set up a route,
If someone has registered the same, please do let me know.
You need to get the IP address from Netlify, After you add a new domain alias in the App Domain Management you will see "Check DNS configuration", click on it, then a popup will open you can see there is an IP address, just copy it and use it in OnlyDomains with each Host Names that you add from Netlify.

Azure Portal IP-configuration cannot modify DNS-Name of a VM

It is only a few days that I can no longer modify the DNS-name of a new or existing VM on the portal IP-configuration page. A 100% certain that this worked before.
The information says:
Diese öffentliche IP-Adresse kann nicht aktualisiert werden, da sie der IP-Konfiguration „ipconfig1“ in Netzwerkschnittstelle zugeordnet ist.
which is:
This public IP address cannot be updated, because it is assigned to the IP configuration "ipconfig1" in network interface
Anyone an idea why this came up and how to add/change a DNS-Name to a VM now?
Thanks a lot
Urs
The error message "This public IP address can't be updated because it is associated to the IP configuration 'ipconfig1', in the network interface 'nic-name'" is expected behavior with an update to the Azure Portal experience. When you deploy Public IP with Standard SKU, you will be able to modify DNS name post association to NIC. But when you deploy Public IP with Basic SKU, the above mentioned error/warning pops up where you need to disassociate the Public IP to change or add DNS name.
Below are the steps you need to follow to modify the DNS name of your VM:
Select the name of the network interface mentioned in the warning (e.g.,web-vm1234)
Select NIC name
In the Network interface resource, select the IP configurations tab, and then in the list of IP configurations, select ipconfig1.
Select IP config
In the IP configuration, under the Public IP address settings select Disassociate, and then select Save.
Disassociate Public IP
Reference : https://learn.microsoft.com/en-us/azure/virtual-network/remove-public-ip-address-vm
In a new browser tab (leaving the previous tab sitting on the IP configuration tab), navigate to the Azure Portal.
In the Azure Portal, search for and then navigate to the associated public IP address resource.
In the Public IP resource, select the Configuration tab, enter the desired DNS name in lowercase as the DNS name label, and then select Save.
Modify DNS label
Note: Make sure you get the green tick next to your DNS name label. If not, this means the name you have entered is not available. Try adding a number or changing it in some other way to make it unique.
Close the browser tab with the Public IP address, and return to the browser tab you were just on with the ip configuration.
In the ipconfig1 configuration, in the Public IP address section, select Associate and then in the Public IP address list, select the IP address. Finally, select Save.
Associate Public IP
Navigate back to your Virtual Machine and do a refresh. Now you should see the modified DNS name in the VM overview.

Accessing IIS website from another device without creating an inbound rule

I have deployed my flask application on IIS using the IP address. I want to access this from another PC in the network, I have read about creating an inbound rule and allowing the access but is there a safer way to do this?
In my opinion, you could use the 80 port which is usually an open port.
if you want to use another port you can set the firewall and use the private only in profile:
after that, you could use iis IP and domain name restriction to restrict the other ip then the remote machine IP.
you can follow the below steps to allow connections from specific IP addresses:
1)Open IIS Manager
2)In IIS Manager, expand SERVERNAME > Sites > click on a required website > double-click IP Address and Domain Restrictions
3)Click Add Allow Entry... (on the right pane) to add an IP address or IP address range that will be allowed to access the website. Click OK.
4)Once allowed IP addresses have been added, click Edit Feature Settings... and select Deny for Access for unspecified clients. Click OK.
Now, only users with the specified IP addresses are able to access the website.

How to prevent website access by server IP address on IIS server?

Recently our application scanned and found that application should not be accessible from server IP address only should Accessible through domain name
please tell me if anyone have make this work
For starters, your preferred approach is not necessarily more secure than the one you wish to prevent. Just saying.
You can accomplish your objective by configuring the default site as blank site (or whatever permissions or response you want).
To do this, on your IIS,
Move your content to a different folder (like c:\Inetpub\wwwroot\MySite)
Create a new site (IIS manager, right click "Sites". Add website")
Settings: "Physical path" points to your new content location (c:\inetpub\wwwroot\mysite), "IP address" is unassigned, "Host name" is the url for your site.
In IIS, right click "Default Web Site". "Edit Bindings". For any of the entries with "IP address" of "*", Edit, and remove the host name.
This will force anyone going to your site with the IP, but not a correct hostname, to go to your default site, which will be empty.

Find the virtual IP address of a Shared Web App

I am trying to connect my custom domain (in my case it's through Godaddy) to my Azure web app.
I have followed all the steps but I am missing the web app IP address to complete the process.
The tutorial found in Azure says:
To create an A record, you need the virtual IP address of your web app. To get the IP address:
In your browser, open the Azure Portal.
Click the Browse option on the left side of the page.
Click the Web Apps blade.
Click the name of your web app.
In the Essentials page, click All settings.
Click Custom domains and SSL.
In the Custom domains and SSL blade, click Bring External Domains". The IP address is located at the bottom of this part.
...everything works well until the last step (#7). I see no "Bring external domains", nor any IP address.
Under "Properties", there is a section OUTBOUND IP ADDRESSES, that contains 4 IPs. None of them seems to redirect to my site (http://educa03.azurewebsites.net/).
How can I find this IP address needed for the A record?
At some point it seems that a bug crept in that has made the incoming IP address disappear from that page.
If you are on a plan that supports domain names, then the best way to find your external IP address is to ping it.
e:\PS>ping educa03.azurewebsites.net
Pinging waws-prod-am2-051.cloudapp.net [104.47.137.62] with 32 bytes of data:
So in this case your external IP address, that you can put in A records, is 104.47.137.62
Any chance you're using a free tier app? if so, you need to upgrade to at least "Shared" to map the custom domain.

Resources