Cannot browse through PIX

[carlsclan]

Hi there, I have a PIX and it is configured as describe on CCO.
I have a PC on the inside and a Router. the Outside is connected to an ADSL router.
The Router can recieve NTP fine.
I am using DHCPD on the PIX and have acquired all the IP stack etc. I can ping the ADSL router fine.
I can browse Cisco's website using its ip address.
When I try to browse using name resolution it fails, so there is something to do with DNS. here is the config
nterface ethernet0 100full
interface ethernet1 100full
nameif ethernet0 outside security0
nameif ethernet1 inside security100
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
hostname pixfirewall
fixup protocol dns
fixup protocol ftp 21
fixup protocol h323 h225 1720
fixup protocol h323 ras 1718-1719
fixup protocol http 80
fixup protocol rsh 514
fixup protocol rtsp 554
fixup protocol sip 5060
fixup protocol sip udp 5060
fixup protocol skinny 2000
fixup protocol smtp 25
fixup protocol sqlnet 1521
fixup protocol tftp 69
access-list acl_out permit udp any any
pager lines 24
logging buffered debugging
mtu outside 1500
mtu inside 1500
ip address outside 11.11.11.250 255.255.255.0
ip address inside 10.0.0.1 255.0.0.0
ip audit info action alarm
ip audit attack action alarm
no failover
failover timeout 0:00:00
failover poll 15
no failover ip address outside
no failover ip address inside
pdm history enable
arp timeout 14400
global (outside) 1 11.11.11.251
nat (inside) 1 10.0.0.0 255.0.0.0 0 0
access-group acl_out in interface outside
route outside 0.0.0.0 0.0.0.0 11.11.11.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00
timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00
timeout uauth 0:05:00 absolute
aaa-server TACACS+ protocol tacacs+
aaa-server RADIUS protocol radius
aaa-server LOCAL protocol local
no snmp-server location
no snmp-server contact
snmp-server community public
no snmp-server enable traps
floodguard enable
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd address 10.1.1.1-10.1.1.254 inside
dhcpd dns 172.22.0.126 192.168.100.12
dhcpd wins 192.168.100.12 172.22.0.126
dhcpd lease 3600
dhcpd ping_timeout 750
dhcpd auto_config outside
dhcpd enable inside
terminal width 80
Cryptochecksum:6333962eaf9418b30a8a2f796eeccbac
pixfirewall(config)#

so this appears to be a DNS resolve issue. Any ideas?

 

[Supergrrover]

Are these correct?
dhcpd dns 172.22.0.126 192.168.100.12
dhcpd wins 192.168.100.12 172.22.0.126

Where are these servers? Are they internal networks? Can the PC ping and port query them?


Brent
Systems Engineer / Consultant
CCNP, CCSP

 

[carlsclan]

i only have one server on the inside, which is internal. This can ping the ADSL router on the outside, and as i say this can get to the internet if i put an ip address of a

http://www server

manually, but will not resolve DNS.

 

[carlsclan]

how can i query the DNS from the PC? if i type in say "ping cisco.com" it is unresolved.
Many thanks

 

[Supergrrover]

If you have windows, use nslookup. Google it for help.

The IPs you have aren't on your internal network. Make sure these are correct.


Brent
Systems Engineer / Consultant
CCNP, CCSP