Hi everyone, I explained you what is my goal: All the routing is good, NAT is working fine. What I try to accomplish in big words is exactly what NAT is doing with IPs but with domain. Is there a way to hide my internal domain from the outside world and, from a middle server, translate the domain to another one for external use and vice-versa for the internal? We need to use services like Mail, Chat federation, DNS, domain trust with other sites but, we want to have our internal domain private. Only publish an external given domain name. Its maybe looking weird but, dont worry the reasons are totally right. Thank you,

Hello, I think you can't but please ask in http://social.technet.microsoft.com/Forums/en-US/winserversecurity/threadsBest regards Meinolf Weber MVP, MCP, MCTS Microsoft MVP - Directory Services My Blog: http://msmvps.com/blogs/mweber/ Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

I may have misunderstood a little but surely what you are asking for is what is best practice anyway? most domains that follow best practices will have a .local internal domain name and a external domain name which is used for external access. 8B17