Hello,
Pix 515e, v6.3.1
I'm running split dns and things are running ok. However, if I have a host defined in a static statement the Pix will doctor the dns replies when I query an external name server via a LAN workstation.
For instance:
static (inside,outside) a.b.c.d 192.168.16.3 netmask 255.255.255.255 0 0
If I do a nslookup from my LAN and point to an Internet dns server (4.2.2.1) the request gets doctored by the pix and I get the internal address (192.168.16.3) of the static instead of the public address. Right now, the only way for me to check external DNS is to ssh into a machine outside the PIX and do a nslookup from there.
I've done the following:
- there are no aliases defined
sysopt nodnsalias inside
sysopt nodnsalias outside
- my statics don't have the "dns" clause.
Can I turn off the dns doctoring?
Ben
