Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Firewalls
[Top] [All Lists]

Cisco PIX - DNS

Subject: Cisco PIX - DNS
Date: Tue, 22 Mar 2005 10:45:12 -0300
Hi,

I'm setting up a new network where I´ll have webhosting servers behind the PIX.
I get problems with the DNS, because when the servers that are behind the 
firewall ask about any record the DNSs respond with the public IP, and when it 
try to connect, It can´t. About it I can't send an email from MAIL1 to MAIL2.
I was reading about the alias command, but it appears to be used when you have 
the DNSs outside your network.
Anybody knows how I can resolve it?

Below is a basic configuration of my pix and the diagram of the network.

Thanks,

Charly

Cisco PIX Firewall Version 6.1(1)
static (inside,outside) 200.200.200.3 192.168.0.1 netmask 255.255.255.255 0 0
static (inside,outside) 200.200.200.4 192.168.0.2 netmask 255.255.255.255 0 0
static (inside,outside) 200.200.200.5 192.168.0.3 netmask 255.255.255.255 0 0
access-list outside-list permit udp any host 200.200.200.3 eq 53
access-list outside-list permit tcp any host 200.200.200.3 eq 53
access-list outside-list permit udp any host 200.200.200.4 eq 53
access-list outside-list permit tcp any host 200.200.200.4 eq 53
access-list outside-list permit udp any host 200.200.200.5 eq 53
access-list outside-list permit tcp any host 200.200.200.6 eq 53
access-list outside-list permit tcp any host 200.200.200.3 eq 25
access-list outside-list permit tcp any host 200.200.200.3 eq 110
access-list outside-list permit tcp any host 200.200.200.4 eq 80
access-list outside-list permit tcp any host 200.200.200.5 eq 25
access-list outside-list permit tcp any host 200.200.200.5 eq 110
access-list outside-list permit tcp any host 200.200.200.5 eq 80
access-group outside-list in interface outside
global (outside) 1 200.200.200.10
nat (inside) 1 192.168.0.0 255.255.255.0 0 0
route outside 0.0.0.0 0.0.0.0 200.200.200.1 1




JPEG image

<Prev in Thread] Current Thread [Next in Thread>