PIX DMZ address resolution

prpalmquist — Fri, 21 Feb 2020 05:56:13 GMT

My external DNS servers are on a PIX DMZ interface and they support multiple Web and Application servers on the same phyical subnet. When one of these servers attempts to access a site ON THE SAME PHYSICAL SUBNET, the DNS query resolves to an external address and the connection fails.

I have an ALIAS statement but this does not work in this instance becuase the lookup does not go through the PIX. If I use NSLOOKUP and attach to a DNS server on the outside of the PIX, the ALIAS commands takes over and things work properly.

I suppose I could make these servers use someone elses DNS (external to the PIX), but I'd rather use my external DNS servers.

Any ideas?

Re: PIX DMZ address resolution

a-vazquez — Wed, 26 Dec 2001 20:47:37 GMT

The workaround is to reverse the alias addresses. See these docs for help. http://www.cisco.com/warp/public/110/pixfaq.shtml#Q15 and http://www.cisco.com/warp/public/110/alias.html

topic Re: PIX DMZ address resolution in Network Security

PIX DMZ address resolution

Re: PIX DMZ address resolution