cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

886
Views
0
Helpful
4
Replies
cbuskirkspark
Beginner

ASA 5550, DNS doctoring not working

We are in the first stages of migrating to a new data center and have hit a bit of a roadblock with DNS Doctoring. We have been using it for years without trouble at our old site with almost no config. Any help things I might be overlooking would be greatly appreciated.

All of our Nat entries are tagged with dns

static (inside,outside) 64.99.87.66 10.5.0.66 netmask 255.255.255.255 dns

Dig always returns the public IP.

[root@iscsi ~]# dig  @8.8.8.8 monitor.datamaze.net

; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6 <<>> @8.8.8.8 monitor.datamaze.net

; (1 server found)

;; global options: +cmd

;; Got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38510

;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:

;monitor.datamaze.net.          IN      A

;; ANSWER SECTION:

monitor.datamaze.net.   881     IN      A       69.99.76.66

;; Query time: 47 msec

;; SERVER: 8.8.8.8#53(8.8.8.8)

;; WHEN: Fri Dec  7 12:19:25 2012

;; MSG SIZE  rcvd: 54


Trace path from the same box show it hititng the ASA

[root@iscsi ~]# tracepath 8.8.8.8

1:  10.5.0.78 (10.5.0.78)                                  0.094ms pmtu 1500

1:  64.99.87.1 (64.99.87.1)                                0.754ms asymm  2

1:  64.99.87.1 (64.99.87.1)                                0.711ms asymm  2

2:  no reply

3:  no reply

Thanks,

Chris

4 REPLIES 4
Julio Carvajal
Advisor

Hello Chris,

What version are you running,

Where are the clients you are using to access this server

You are using 8.8.8.8 as the DNS server right?

Just want to confirm the little things so we can start working on this

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hi there,

Thanks for the response. Currently we are on version 8.2(1). Clients are a mix of Centos 6.2 and Windows 2008 R2 boxes. And yes we are using 8.8.8.8 as our dns server.

Hello,

But I mean where are the servers?? on witch interface?? The same interface than the server they are trying to access?

Regards,

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC

Hello,

Sorry I misunderstood. All of the clients are on the same VLAN although there are several differenet subents sharing that VLAN. Redundant 1 is connected to that VLAN with an IP of 10.5.5.1. All servers have 10.5.5.1 as their gateway reguardless of which subent they are on.

The DNS server is Google's public DNS.

Thanks,

Chris

Create
Recognize Your Peers
Content for Community-Ad