DNS and PIX

[pxavier1]

Hiiii All,

Can anyone clarify this:

1) Web client and Web Server lies in the Inside Network

2)DNS Server in the outside Network

3) The web client in the inside network sends a name resolution request to the DNS server .

4)The DNS Server replies to this request by embedding the global ip of Web server in the data payload of the DNS reply.

5)The web client gets the global Ip of the webserver .

Now, I read PIX doesn't allow the web client to access the webserver with the global IP ( This gives rise to the alias command to fix the global Ip in the data payload with the local Ip of webserver).Why is it PIX not allowing the webclient to access the web server with global IP??

Your Help Is Much Appreciated.

Thanks,

X.P.Pratibha

[nkhawaja]

You are wrong. Why would PIX not allow the global IP to come back to the host. It is not an issue with PIX. What happens is that when clients gets a public IP for the WWW server, the client will not be able to communicate with the web server using the public IP, since the client has a private IP. So using the alias command, pix converts the public address to the private address , so the client eventually gets the private address