Date: Tue, 7 Aug 2001 00:49:02 -0600 From: "Mike Roest" <bsd-lists@blahz.ab.ca> To: <freebsd-questions@FreeBSD.ORG> Subject: RE: natd redirect_port only works from the outside Message-ID: <NCEHIMLGAONJIIDNJCIJKEBODFAA.bsd-lists@blahz.ab.ca> In-Reply-To: <20010806233713.C449@blossom.cjclark.org>
next in thread | previous in thread | raw e-mail | index | archive | help
The problem with that is if you assign a pair of records like this: www IN A 63.105.29.28 www IN A 192.168.0.10 There is a 50/50 chance (give or take) that an external host will do a dns lookup and grab the internal 192.168.0.10 IP. There are 2 way's around this. 1) Run a internal only DNS server that all hosts behind the gateway use to lookup local services. 2) run 2 bind processes on the gateway box. One process bound to the external IP nic and one bound to the internal IP NIC. This is accomplished through the listen-on directive in bind 9 found on page 54 of the bind 9 reference manual. Then assign in your whois record the external box as the primary DNS server for the zone. In both situations you will have to assign all the internal boxes to use the Internal only DNS server as their main DNS. So most likely the internal DNS would need to be a caching server as well. Hope this helps --Mike -----Original Message----- From: owner-freebsd-questions@FreeBSD.ORG [mailto:owner-freebsd-questions@FreeBSD.ORG]On Behalf Of Crist J. Clark Sent: Tuesday, August 07, 2001 12:37 AM To: Tabor Kelly Cc: freebsd-questions@FreeBSD.ORG Subject: Re: natd redirect_port only works from the outside On Mon, Aug 06, 2001 at 06:14:13PM -0700, Tabor Kelly wrote: [snip] > > In split DNS, somehost.mydom.org will > > map to 63.105.29.28 for the outside world and 192.168.0.10 (or > > whatever) for your local net. > > I understand this, I was wondering if this can be done off of one bind > service, or if I will need to run 2. I am sorry if this is a silly > question, I have not set bind up yet. Yes, you can do it with one named(8) process. You pretty much have to since only one can be listening on port 53 at a time. -- Crist J. Clark cjclark@alum.mit.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?NCEHIMLGAONJIIDNJCIJKEBODFAA.bsd-lists>