PIX firewall or dns?

Question

I can't access  which is hosted by one of theservers inside a PIX firewall. Can someone please tell me how toconfigure the firewall/DNS (Windows 2000 server)? I tried to add a hostto the Windows 2000 DNS but it won't take any dots. How can I add the site to the DNS?Thanks for your help.

christian koch · Accepted Answer

can u ping host?can u traceroute to host?post results please

soup_or_power · Answer

I can't ping  from intranet. However, the pingsucceeds when I do it from The trace route resolves the name to correct external IP209.178.198.245 and reports Time Out!Thanks

christian koch · Answer

can you detail a little more of your network layout?you have a win2k nameserver doing all your translations for internalcomputers?

soup_or_power · Answer

PIX firewall | Cisco Router | ----------------------------------------------------- | |

192.168.11.0 192.168.5.0 subnet subnet

Yes.

Thanks

NO_spamm · Answer

Are you sure the PIX is not DNS doctoring any DNS replieswhile flowing from inside to outside?What Version software is the PIX running?FW

soup_or_power · Answer

PIX needs to map the 209.178.198.245 (internet) from DNS to192.168.5.152 (the intranet). It is not doing it right now.PIX Version 6.1(1).Thanks

chris · Answer

chris · Answer

alias (inside) 192.168.x.y 209.178.198.245 255.255.255.255

.. where 192.168.x.y is the IP address of the web server. Of course this presumes that the client is making an external DNS query and not an internal one.

Or

Upgrade your Pix to the latest version and use the 'dns' keyword on the static translation (preferred now over 'alias').

Chris.

soup_or_power · Answer

Many thanks for your kind help. It is fixed now.Regards

Walter Roberson · Answer

Ah, you still haven't upgraded your PIX so as not to be potentiallyaffected by the known security problems. The upgrade is free, and is fast once you've gotten all the paperwork out of the way...

PIX firewall or dns?

Join the Discussion

Didn't find your answer?