DNS and NAT

[lardum]

DNS names for servers on local intranet are not working properly when using internal IP-adresses. Anyone have any ideas?<br>

 

[bandit324]

We have a similar problems. Find a solution yet?&nbsp;&nbsp;<br><br><br>Thanks <br><br>Nick

 

[lardum]

Nope, still looking, considering of reconfiguring the Firewall since i'm not the one who installed it.<br><br>Keep in touch if you hear something.<br><br>Regards<br><br>Lars<br>

 

[lardum]

This problem is because a limitation of NAT, you have to place a internal DNS server. Or use three interfaces on the PIX.<br><br>Regards<br><br>Lars

 

[jroysdon]

See my reply to &quot;PIX and Outlook Web Access&quot; regarding NAT and local routing on same subnets.

Questions to check out: Can you access inside servers with their inside ip addresses? What does your DNS record point to, public or internal address (I would guess internal, as it was for an intranet)?

 

[cao595812]

you can use alias utility on pix
i think your DNS server is in your internal network.if you want to clients in your internal network use DNS in private ip address .
assume that the public ip address for your dns server is 99.99.99.99 and the private of it is 10.10.10.10
you can use the following command on your pix
alias (inside) 10.10.10.10 99.99.99.99
static (inside,outside) 99.99.99.99 10.10.10.10
conduit permit tcp host 99.99.99.99 eq 53 any