Re: can't use dns to access server within the firewall

From: Dave Goode (djg39_at_cam.ac.nospamformethanks.uk)
Date: 10/10/04 

Date: Sun, 10 Oct 2004 07:30:51 GMT

MZ wrote:

> I really can't figure out what /etc/hosts is doing.  I want to be able
> to type '<mydomain>' into a web browser and access it like I can from
> outside the network, or type 'telnet <mydomain>' in DOS and be able to
> telnet to the machine like I can from the outside.  With the setting
> above, I try typing 'ping server' and it says it can't find the host. 
> But it pings 192.168.X.X perfectly fine.

How are your other machines resolving domain names? Are they using 1) your
FreeSBD box or 2) some other DNS server outside your network?

If:

1) it should work as long as your local copy of bind (or whatever you use)
is aware of the host names of machines on your network, or they have
entries in /etc/hosts and your FreeBSD box is set to look in /etc/hosts
first when trying to resolve, and your other machines are all configured
to append your domain name to names that are not full qualified.

2) trickier problem. In this case, you should consider using your FreeBSD
box as a caching DNS server and configure it correctly in order to
resolve internal names properly. You can't expect a DNS server somewhere
on the internet to know about hosts on your network, especially when
you've given them private IP addresses.

Start by reading carefully:

http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/network-dns.html

and carry on from there. Once you understand how DNS works, you'll
understand why yours isn't working and be in a position to fix it.

Dave 

-- 
Faculty of Divinity, University of Cambridge
West Road, Cambridge, CB3 9BS
http://www.cus.cam.ac.uk/~djg39/

Relevant Pages

  • Re: Need to forward request for a domain to another DNS server
    ... they would have to BE in a hierarchy ... >>> 192.168.0.3 not a root server ... >>> Active directory on both machines in the same time. ... >> DNS server set) there are two basic ways to get ...
    (microsoft.public.win2000.dns)
  • Re: Domain Controller Issue - Urgent Help
    ... DNS server as well. ... The other machines that are the new hardware I was trying ... FSMO roles and is the Global Catalog as well. ...
    (microsoft.public.win2000.active_directory)
  • Re: SPNEGO 40960 errors
    ... I'll have them check that (I don't have direct access to the machines ... A reverse lookup is not required for proper AD function. ... establish a secured connection with the server prisoner.iana.org. ... they have no record of your DNS Server, they reply with a "Server does ...
    (microsoft.public.windows.server.active_directory)
  • Re: Slow browsing and file opening/saving
    ... these new machines are extremely slow at ... > The client still has some Windows 98 pcs which do not have any ... There is a WINS server in the main office. ... They should NOT be pointing to an ISP's DNS server. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Slow PING response from 470-487T switch ??
    ... PING server it waits and sits for about 13 seconds before it starts ... are not registering with a DNS server authoratative for your ... There ain't no vikings here. ...
    (comp.dcom.sys.nortel)
Loading