4. Set Up Your Internet Address
For your users to send and receive Internet email or
access your network services from a remote location, you must establish a
presence on the Internet. This is different from simply accessing the
Internet, which you configured the server to do when you ran the Connect
To The Internet Wizard. Establishing a presence on the Internet enables
users on the Internet to access your network’s resources. To receive
email from users outside your organization, for example, their messages
must be able to reach the Microsoft Exchange Server application running
on your server.
By default, Windows SBS 2011 configures your server to use a private IP address and a domain name with a local
suffix (both of which are inaccessible from the Internet by design). To
establish an Internet presence, you must register a domain name with an
Internet domain registrar and configure your router to admit Internet
traffic addressed to your server. The domain name enables Internet users
to locate your network, and the router configuration lets the packets
coming from those users pass through your firewall. Both of these tasks
can be relatively complicated, but fortunately, Windows SBS 2011
includes an Internet Address Management Wizard that helps you to
complete them.
The Internet Address Management Wizard prompts you to
select a domain name that is accessible from the Internet, as opposed
to the local name you specified for your Active Directory Domain
Services (AD DS) domain during the Windows SBS 2011 installation. The
most common practice is to use the same second-level domain name, but
with a different top-level domain. For example, if you use adatum.local for your internal domain, you might choose adatum.com
for your Internet domain. You don’t have to use the same second-level
domain, however; you can use any domain name that is available for
registration.
If the Internet domain name you select is available,
the wizard enables you to register it with one of several commercial
domain registrars. If you already have a registered domain name, the
wizard lets you use that instead. Once you have a registered domain
name, the wizard then configures your server, your router, and the
Domain Name System records for the new domain.
4.1. Registering a New Domain
The Internet Address Management Wizard requires
access to the Internet, so you must complete the Connect To The Internet
Wizard first. Then, to run the wizard and register a new domain name,
use the following procedure:
Log
on to your Windows SBS 2011 primary server using an account with
network Administrator privileges. The Windows SBS Console appears. On the Home page of the Windows SBS Console, click Set up your Internet address. The Internet Address Management Wizard appears, displaying the Before You Begin page.
The Before You Begin page lists the resources that you need to complete the wizard, which vary, depending on whether you are registering
a new domain name or using an existing one. To register a new name, you
must have some idea what name you want to use and a credit card to pay
the registration fee.
Tip:
Determining what domain name to use for your
organization can often be the hardest part of this entire process. In
fact, you might want to begin your search for a domain name before you
install Windows SBS 2011 and create your internal domain. The most
popular generic top-level domains (gTLDs) on the Internet: com, net, and org,
have millions of names already registered, and you might find it
difficult to find a satisfactory name that is available for use.
If your company name is already taken in the com, net, and org
domains, you must either choose a variation on the company name, or
select a different gTLD. For example, if you are the owner of an
eponymously named company that manufactures kilts, and your surname is
the same as that of a well-known fast food restaurant chain, you will
probably not be able to register your company name in the com
domain. Your alternatives are to either vary the name, such as by
adding the word “kilts” to your surname, or register your surname in a
less popular gTLD, such as biz. To check on the availability of specific domain names before you run the Internet Address Management Wizard, you can use the WHOIS service provided by the Internet Corporation for Assigned Names and Numbers (ICANN), available at http://www.internic.net/whois.html. Click Next. The Do You Want To Register A New Domain Name? page appears.
Select the I want to purchase a new domain name option and click Next. The Type The Domain Name That You Want To Register page appears.
In the Domain name text box, type the second-level domain name that you want to register. Then, from the Extension drop-down list, select the top-level domain that you want to use and click Next. The Choose A Domain Name Provider page appears. The
wizard displays a list of domain name registrars, based on the domain
name that you entered and the location that you specified during the
Windows SBS 2011 installation.
Note:
Although you can use any registrar to register your
domain name, you must select one of the registrars suggested by the
wizard for Windows SBS 2011 to manage your domain fully.
Select the domain registrar that you want to use and click Next. The wizard sends the name you specified to the selected registrar.
Tip:
You might want to examine each of the registrars’
websites before you commit to one of them. Domain registration has
become a highly competitive business in recent years, and prices can
vary widely.
If the name you specified is not available for registration, the Choose
A Different Domain Name page appears, offering variations on the name
that are available. Type an alternative name in the fields provided and
click Search.
If the name you specified is available for registration, the Register And Purchase The Domain Name page appears. Click Register now to open Internet Explorer and connect to the registrar’s website.
Tip:
BEST PRACTICES
Domain name registrars are commercial enterprises, and they may very
likely try to sell you a variety of additional products and services
before you complete the registration process. While you might want to
consider some of their offers, you don’t need anything other than a
standard domain name registration to complete the wizard and finish
configuring your server.
Use
the form on the registrar’s website to register your selected domain
name. You have to supply, at minimum, your name, mailing address,
telephone number, and credit card information to complete the
registration process.
Note:
The registrar adds the contact information that you supply to the WHOIS
database, in which it is available to anyone who searches for your
domain name. Domain name registration listings must have an
administration, a billing, and a technical contact. These can all be the
same person, or you can specify a different individual for each one.
Because this is public information, many organizations use a post office
box or pay an additional fee for a private registration to prevent
their contact information from being harvested by spammers.
Once you have completed the registration process on the website, return to the wizard and click Next. The Store Your Domain Name Information page appears.
In the Domain name and extension text box, type your full domain name, with the suffix. In the User name and password text boxes, type the credentials that provide access to your account on the registrar’s website.
Note:
Some registrars have you supply the user name and
password that you want to use during the registration process, while
others assign credentials to you.
By default, the wizard uses the name remote for the Windows SBS 2011 Remote Web Workplace site, so that the Internet URL for the domain adatum.info would be http://remote.adatum.info. If you want to use a different name, click Advanced settings to display the Advanced Settings dialog box, shown in the following illustration, in which you can specify an alternative.
Click Configure. The Configuring
Your Server page appears, displaying the wizard’s progress as it
configures the server, the router, and the DNS resource records for the
domain.
When the configuration process finishes, the Congratulations! page appears, summarizing the wizard’s results and displaying any warnings that might have occurred. Click Finish. The wizard closes.
4.2. Using an Existing Domain
If you already have a registered domain on the
Internet, you can still use the Internet Address Management Wizard to
configure your network to use it. When you select the I already have a domain name that I want to use option on the Do You Want To Register A New Domain Name? page and click Next, a How Do You Want To Manage Your Domain Name? page appears, as shown in Figure 4.
This page provides the following two options:
I want the server to manage the domain name for me
To use this option, your domain name must be registered with one of the
registrars supported by the wizard. If you have registered your domain
with another registrar, the wizard gives you the opportunity to transfer
the domain to one of the supported registrars, a process that can take
several days. Once you have completed the transfer, the wizard proceeds
as with a newly registered domain. I want to manage the domain name myself
If you decide to leave your domain name with another registrar, the
wizard configures your server and your router, but it cannot create the
new resource records your network needs on your registrar’s DNS servers.
In this case, you must create those resource records yourself, using
the interface supplied by the registrar and the information in the next
section.
4.3. Understanding the Wizard’s Configurations
During the configuration
phase, the Internet Address Management Wizard makes a variety of
changes to the various components involved in your presence on the
Internet. First, on your server running Windows SBS 2011, the wizard
configures the following services:
Certification Authority (CA) The wizard has the CA on the server issue a certificate for the Remote Web Workplace website, as shown in Figure 5. This certificate enables users on the Internet to confirm that the RWW that they are connecting to is authentic.
Domain Name System (DNS) On the server’s DNS server, the wizard creates a zone for the remote third-level domain beneath the Internet domain that you registered, as shown in Figure 6. This makes the DNS server the authoritative source for information about this third-level domain.
Internet Information Services (IIS) The wizard configures IIS on the server to recognize incoming web traffic addressed to the remote domain and forward it to the Remote Web Workplace site. Simple Mail Transfer Protocol (SMTP) The wizard configures Exchange Server 2010 to process incoming SMTP traffic addressed to the domain you registered.
Next, the wizard uses the credentials you supplied to
connect to your registrar’s website and configure DNS records for your
newly registered domain. What you are actually paying for when you
register a domain is space on the registrar’s DNS servers, in which you
can create resource records in that domain.
Using the interface provided by the registrar, the wizard automatically creates the resource records listed in Table 1.
Table 1. DNS Resource Records for Your Internet Domain| RECORD TYPE | NAME | RECORD SETTINGS | RECORD FUNCTION |
|---|
| Host (A) | remote | IP address of your router’s external interface | Maps the remote name in your domain to your router’s Internet IP address | | Mail Exchanger (MX) | domain.com | remote.domain.com | Directs SMTP mail traffic to your server running Windows SBS 2011 | | Text (TXT) | domain.com | v=spf1 a mx ~all | Prevents email sent by your internal users from being flagged as spam | | Service (SRV) | _autodiscover | Protocol = _tcp
Priority = 0
Weight = 0
Port = 443
Target = remote.
domain.com | Enables remote email users to configure the Outlook Anywhere client automatically |
Note:
In this table, replace domain.com with your full Internet domain name and suffix.
Finally, if your router conforms to the Universal
Plug and Play (UPnP) standard, the wizard configures your router by
opening ports 25, 80, 443, and 987, so that traffic arriving from the
Internet using those ports can pass through the firewall to your server
running Windows SBS 2011.
If your router does not support UpnP, you must configure it yourself to admit traffic through those ports and forward it to the server’s IP address. A router’s configuration site typically provides an interface for this like the one shown in Figure 7.
5. Configure a Smart Host for Internet Email
A smart host
is an external email server, typically operated by an ISP, which you
can use as an intermediate stop for your users’ outgoing email.
|
