DNS Doctoring on ASA

[Ivan Marinovic]

Hi,

I have one computer on the local network, and it needs to be available local and public so I crate:

object network x.x.x.x-10.1.4.157
host 10.1.4.157
nat (inside,outside) static x.x.x.x dns

College add entry to DNS (only public IP) and I am unable to access this computer locally. From Outside it is working.

Did I miss something?

This is done on ASA-5545-X.

p.s. when I chang local DNS to 8.8.8.8 everything is working ok!

Best Regards,

Ivan

[mkazam001]

might be helpful:

https://community.cisco.com/t5/routing/dns-doctoring-asa-5505/m-p/3400551

regards, mk

[Ivan Marinovic]

Hi, thanks for reply my config is:

policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 4096
no tcp-inspection
policy-map global_policy
class inspection_default
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect pptp
inspect esmtp
inspect ftp
inspect dns preset_dns_map
class sfr
sfr fail-open monitor-only
class class-default
user-statistics accounting


Nat-rewrite is enable (i check it on ASDM) but in sh ru is not writen.