Route / allow traffic from internal source out Wan interface and then back in the same interface

[smithcolm]

Hi,

I have a cisco ASA 5510.

I have a public Dns entry for a service  thats say  service.domain.com.

the DNS entry for this is the same IP that computers in one office access the internet on.

Computers can see the local IP of the server that runs this service (its on a DMZ) but when they ping service.domain.com or try to access the particualr service that runs on this server via the full DNS entry they cannot.

as a workaround when i need some pcs to access this service i modify the hosts file to use the local DMZ ip for the full DNS entry.

Changing local DNS is not an option as we have multiple sites that replicate DNS and in the other sites they can access the service via   service.domain.com and this should be left intact.

thanks

[cadet alain · Accepted solution]

Hi,

leverage DNS doctoring :http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807968d1.shtml

Regards.

Alain

Don't forget to rate helpful posts.

[smithcolm]

Thanks for that.

that does appear to be correct answer but i dont think it will work for me as i am using PAT for specific ports