i have a server inside the dmz that 1

[8624]

i have a server inside the dmz that has to talk to a server on the inside which i the dns server. to provide name resulation for lookup. is there a way to provide access to the dns server for the dmz and if so how can i make sure that is it working
this it part of the config
inside server 10.10.10.102
dmz server that needs to access the server is
192.168.1.233
static(inside,dmz) 192.168.1.250 10.10.10.102
the xlation is 192.168.1.250
how can i make suer this is working

 

[baddos]

Who initiates the communication (dmz or inside)?

If you want a lower level secury interface to talk w/ a higher level interface, you'll need an access-list or conduit list to allow that.

Example

access-list 101 permit udp host 192.168.1.233 host 192.168.1.250 eq 53
access-group 101 in interface dmz

 

[yizhar]

HI.

If all you need is DNS services, then better implement a DNS server on DMZ (on the same machine or additional one).


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar