I have a windows server that's on the domain which has been put in a DMZ. All traffic from the internal network is allowed into the DMZ, but everything initiated from the DMZ heading in is blocked. I've recent installed a backup agent on the DMZ server that needs to regularly check in. I know how to open the appropriate ports for that check in to happen. The problem being that the DMZ server cannot resolve the address of the internal backup server, in order to check in. What is the best practice here? Should I open up my internal dns server to my dmz?
closed as primarily opinion-based by Ricky Beam, YLearn♦ Sep 24 '15 at 4:24
Many good questions generate some degree of opinion based on expert experience, but answers to this question will tend to be almost entirely based on opinions, rather than facts, references, or specific expertise. If this question can be reworded to fit the rules in the help center, please edit the question.