PIX 501 relay client DNS requests out to an internet DNS server?

router = 10.0.0.254 pix outside = 10.0.0.1 pix inside = 192.168.0.254 client = 192.168.0.1 client dns = 192.168.0.254

pix config:

ip address outside 10.0.0.1 255.255.255.0 ip address inside 192.168.0.254 255.255.255.0 route outside 0.0.0.0 0.0.0.0 10.0.0.254 dhcpd address 192.168.0.50-192.168.0.90 inside dhcpd enable inside dhcpd dns 192.168.0.254

How can a PIX 501 relay client DNS requests out to an internet DNS server? I want to specify the PIX outside address, rather than receive it via dhcp.

Thanks Nick

Reply to
nicough
Loading thread data ...

There are many ways to do this and it all depends on how much access you want between the Inside interface of the firewall to the outside

Based on what you provided above you could write in the following:

access-list DNS permit udp 192.168.0.1 255.255.255.0 any eq 53 global (outside) 1 10.0.0.50-10.0.0.90 netmask 255.255.255.0 nat (inside) 1 access-list DNS

Reply to
Rohan

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.