topic Re: PIX DNS rewrites question. in Network Security https://community.cisco.com/t5/network-security/pix-dns-rewrites-question/m-p/542662#M525668 <HTML><HEAD></HEAD><BODY><P>I presume you've read the following document (under dns inspect) ??</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a00805fd87d.html#wp1571019" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a00805fd87d.html#wp1571019</A></P><P></P><P></P></BODY></HTML> Tue, 11 Apr 2006 09:29:27 GMT jmia 2006-04-11T09:29:27Z PIX DNS rewrites question. https://community.cisco.com/t5/network-security/pix-dns-rewrites-question/m-p/542661#M525667 <P>I have a PIX running version 7.0(4) of the software and am trying to configure DNS rewrites.</P><P></P><P>My DNS server is at my ISP hooked onto the outside interface, my servers that I am having the problem with is on the inside and I am using statics to do NAT.</P><P></P><P>The relevant lines from my PIX relating to NAT is below, I have name entries defined for these so I'm just hiding my IP ranges on this forum.</P><P></P><P>static (inside,outside) services1 services1.prv netmask 255.255.255.255 dns </P><P>nat-control</P><P></P><P>If I now do a dns lookup from an inside connected host against my nameserver that is connected to the outside interface I get the real IP address for my server and not the 192.x.x.x</P><P></P><P>I read the docs and it seems to me this should work, in PIX 6.x I would have added alias entries to facilitate this but it seems those are now deprecated.</P><P></P><P>Any help would be appreciated</P> Fri, 21 Feb 2020 08:49:59 GMT https://community.cisco.com/t5/network-security/pix-dns-rewrites-question/m-p/542661#M525667 handmademobile 2020-02-21T08:49:59Z Re: PIX DNS rewrites question. https://community.cisco.com/t5/network-security/pix-dns-rewrites-question/m-p/542662#M525668 <HTML><HEAD></HEAD><BODY><P>I presume you've read the following document (under dns inspect) ??</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a00805fd87d.html#wp1571019" target="_blank">http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a00805fd87d.html#wp1571019</A></P><P></P><P></P></BODY></HTML> Tue, 11 Apr 2006 09:29:27 GMT https://community.cisco.com/t5/network-security/pix-dns-rewrites-question/m-p/542662#M525668 jmia 2006-04-11T09:29:27Z Re: PIX DNS rewrites question. https://community.cisco.com/t5/network-security/pix-dns-rewrites-question/m-p/542663#M525669 <HTML><HEAD></HEAD><BODY><P>thank you, that did the trick.</P></BODY></HTML> Tue, 11 Apr 2006 09:35:04 GMT https://community.cisco.com/t5/network-security/pix-dns-rewrites-question/m-p/542663#M525669 handmademobile 2006-04-11T09:35:04Z