Having internal hosts access DMZ hosts with external DNS name but private IP

mmedwid — Mon, 11 Mar 2019 21:10:32 GMT

Three interface ASA Scenario: Inside 10.10.10.0/24 Outside 4.4.4.10/24 DMZ 192.168.1.0/24

External users resolve www.acme.com to 4.4.4.10 say.

I want internal users to resolve using external DNS but when they that traffic gets

to the ASA I want the traffic to go to 192.168.1.10 the private IP of the server instead

of trying to go outside and failing. I don't want to have a different internal DNS

setup for a bunch of reasons.

What is the best current method to do this? I am running ASA OS 8.2.

Having internal hosts access DMZ hosts with external DNS name bu

Jon Marshall — Thu, 11 Aug 2011 22:17:13 GMT

DNS doctoring is the way to do this. See this document for details on how to configure this -

Jon