topic Local DNS in Network Security

Local DNS

samuel_M9 — Mon, 11 Mar 2019 21:49:32 GMT

Local DNS needs to resolve external domains i.e ( www.yahoo.com ). Local DNS Server is placed in the inside network. Acces-list is applied on inside, outside, dmz interface

local DNS Server IP : 192.168.10.199

Do I need a static-nat to get this working

cheers

SAM

Local DNS

Julio Carvajal — Sat, 12 Nov 2011 20:51:16 GMT

Hello Adam,

If the DNS server needs to be access from the DMZ you will need a static (inside,dmz) and obviously the access-list on the dmz permiting the connection from the DMZ to the DNS server.

I am not sure if I catch your question, please let me know if there is somethin else I can do for you.

Regards,

Julio

Local DNS

Lee Valentin — Sun, 13 Nov 2011 13:35:23 GMT

Your server certainly needs to get internet access. whether it's static or dynamic PAT, is your choice.

This is not really a firewall issue, if your hosts on the inside can ping by IP and the DNS is on the inside as you mentioned it was.

Try adding forwarders to your DNS box. Use the DNS IPs provided by your ISP.

Good luck