Having internal hosts access DMZ hosts with external DNS name but private IP

[mmedwid]

Three interface ASA Scenario: Inside 10.10.10.0/24    Outside 4.4.4.10/24     DMZ 192.168.1.0/24

External users resolve www.acme.com to 4.4.4.10 say.

I want internal users to resolve using external DNS but when they that traffic gets

to the ASA I want the traffic to go to 192.168.1.10 the private IP of the server instead

of trying to go outside and failing.  I don't want to have a different internal DNS

setup for a bunch of reasons.

What is the best current method to do this?  I am running ASA OS 8.2. 

[Jon Marshall]

DNS doctoring is the way to do this. See this document for details on how to configure this -

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968c8.shtml

Jon