DNS or NAT help

i've setup DNS to resolve the public ip adress...with the domain that i have.
From the net everything is working fine.
Now i don't know how to setup the DNS to resolve the same domain in the LAN.
can someone help?
thx

Thx for the hint...
is it possible to have a sample configuration of the views for named.conf?
That meas that i have do duplicate the zone file from /var/named/, change the name and set the the internal ip adress in the copy....
from this:
named/
-rw-r--r-- 1 root wheel 765 Feb 23 17:21 example.net.zone
-rw-r--r-- 1 root wheel 422 Feb 23 17:21 db.192.168.186
-rw-r--r-- 1 root wheel 717 Feb 23 16:47 local.zone
-rw-r--r-- 1 root wheel 195 Mar 21 2005 localhost.zone
-rw-r--r-- 1 root wheel 2498 Mar 21 2005 named.ca
-rw-r--r-- 1 root wheel 630 Feb 23 17:21 named.local
to
from this:
named/
-rw-r--r-- 1 root wheel 765 Feb 23 17:21 external.example.net.zone
-rw-r--r-- 1 root wheel 765 Feb 23 17:21 internal.example.net.zone
-rw-r--r-- 1 root wheel 422 Feb 23 17:21 db.192.168.186
-rw-r--r-- 1 root wheel 422 Feb 23 17:21 db.10.0.0
-rw-r--r-- 1 root wheel 717 Feb 23 16:47 local.zone
-rw-r--r-- 1 root wheel 195 Mar 21 2005 localhost.zone
-rw-r--r-- 1 root wheel 2498 Mar 21 2005 named.ca
-rw-r--r-- 1 root wheel 630 Feb 23 17:21 named.local
thx for the help

Similar Messages

WRT54GSV4 wireless router xbox live nat help

I need help getting this router to be open nat for xbox live. I have tried everything in the book and i can only get a moderate nat. Could someone help me with this please?

Who is your ISP ? If the ISP is DSL the,you need to convert the modem into the bridge mode to get your X-Box working.

DNS, Firewalls, Mail -- Help!

Have a slightly odd setup I can't get to work, wondering if anyone can point me in the right direction.
Have a local network behind a firewall, and one of these machines is a 10.4 Server that acts as an SMTP server. Its configured and works fine for most things....however...
We have several machines behind this firewall, so we have a local DNS server to translate for people who are behind it. We have a website for one of our domains, lets call it fred.com, behind this firewall. The website is not on the same box as the SMTP server.
However, we also have external users who have email addresses that are @fred.com. They use our SMTP server to send their mail, and they connect to an external service to retrieve their mail (long story). That is called pop.fred.com, but again, its outside our local network.
Problem is this -- if a @fred.com user tries to send an email, it works fine unless the user they are sending to is another @fred.com user. Then the email never arrives.
I have our local DNS set up so that the MX record for @fred.com is pointing to the IP address of the external pop server (the same domain that the DNS for the outside world is setup for). The mail.log on the server shows the following:
Aug 7 11:45:20 www postfix/smtp[14474]: 603F5B2DB36: to=<[email protected]>, relay=fred.com[216.126.205.10], delay=1974, status=deferred (host fred.com[216.126.205.10] said: 450 4.7.1 <smtpserver>: Helo command rejected: Host not found (in reply to RCPT TO command))
And after a few days, it'll give up trying. But it works fine if they are trying to send to a [email protected] user. On those messages that work, the relay comes in as localhost.
IF I remove the MX record from the local DNS, I get an outright rejection (of course):
Aug 7 07:51:32 www postfix/smtp[22227]: 8B1CDB2D378: to=<[email protected]>, relay=none, delay=0, status=bounced (Host or domain name not found. Name service error for name=fred.com type=A: Host found but no data record of requested type)
So I've obviously messed up the DNS in some fashion. Anybody have any pointers in how to make this work?
For what its worth, this SMTP server used to be outside our local network -obviously these problems started after we moved it inside.
Any help/pointers are appreciated.
Chris

Wow.. I am a little blown away with all the questions but lets take a direct approach..
1) If you ping an IP address external to your network, does it return..
For instance, here is the IP for google in my part of the country.
host www.goggle.com
www.goggle.com has address 64.182.91.91
2) I presume you can ping clients on your local network but lets just make sure..
3) What does your /etc/resolv.conf contain??
4) Is named running on your server??
For example:
$ ps ax | grep name
42 ?? Ss 2:25.18 /usr/sbin/named -f
93036 s000 R+ 0:00.00 grep name
Lets start there...

Xbox live nat help

Hello all i need help trying to figure out a nat problem that i am having. I start out with a open nat on xbox live when i run the test but after running the test several times my nat will change from open nat to modrate nat for what reason i do not know but i need help trying to figure out how to fix this problem i am useing a wrt160nv2 router thanks.

NAT issues are quite common in this type of setup. Check out this article from the Xbox forum: Strict or moderate NAT type. You will need to adjust some settings on the router to resolve the NAT error on Xbox Live. Enabling UPnP and port forwarding should do the trick. You can refer to the following article for more information about these workarounds: Resolving NAT type issues with gaming consoles through a Linksys router.

DNS issues, please help!

Web access has become unusably slow on my machine using both Safari and Firefox (Airport Extreme + Time Capsule v2). tcpdump shows DNS lookups to be the culprit (lookups take a very long time and often timeout). Sites like Google and Apple take 30 seconds - 3 minutes to load if they ever load at all.
I've spent hours researching this and tried every solution I could find. I disabled IPV6 in Firefox and in the configuration for the WiFi card. I tried manually setting Verizon's DNS servers on the local machine and then also tried using OpenDNS servers instead on both the router and the local machine. I have tried clearing the DNS cache. Sometimes the problem subsides momentarily after changing settings, but it always resurfaces after a short period of time (sometimes within seconds, sometimes 15 minutes).
I have some Windows machines running on the same network (also wireless using the Time Capsule) without any problems.
Does anyone have any other suggestions? I have been troubleshooting this for quite some time and any help would be much appreciated!
Thanks!

The problem reappeared again (after 2 hours of working perfectly fine). Posted below are the results of your suggestion...
I tried shutting Airport off and restarting it and even rebooting the machine with no noticeable improvement either time. After 20 minutes of frustration, it's miraculously working again, but I can't say why or for how long...
<<>> DiG 9.4.2-P2 <<>> +trace www.google.com
;; global options: printcmd
;; Received 17 bytes from 208.67.222.222#53(208.67.222.222) in 5087 ms
; <<>> DiG 9.4.2-P2 <<>> +trace www.google.com
;; global options: printcmd
;; Received 17 bytes from 208.67.222.222#53(208.67.222.222) in 3939 ms
; <<>> DiG 9.4.2-P2 <<>> +trace www.apple.com
;; global options: printcmd
;; connection timed out; no servers could be reached
localhost:~ root# dig +trace www.apple.com

NAT Help

I tried to RTFM, but I simply couldnt follow it, so I'm turning here
for help.
We have a BM3.8 server that is happily running a HTTP/FTP proxy. I
didnt build it but I basically inherited it, and can update the ACL
lists and restart it when it breaks and not much more than that really
:-). What I want to do is use NAT to allow certain staff full internet
access via the BM server. Working pretty much the same way NAT does on
your average home DSL router. So that everything goes through, ping,
msn, p2p clients, games, whatever. I figure the certain staff bti
should be easy enough with a security group, but buggered if I know how
to set up the other bit :-)
Is this possible with BM? Is NAT even the right tool to use? Help
please!

> Thanks heaps Cat.
you're welcome!
> I'd done just about what you described but I was trying to set it up as
> a static not dynamic.. Works now, my concern is that its letting me
> through when I just point a workstation at the BM server as a gateway,
> without any security or IP restrictions so I'm assuming that the
> filtering isnt properly configured. Can you point me in the right
> direction for configuring the filtering properly, and then adding
> exceptions back to it?
there are two ways to restore the default filters.
The filters for BM3.8 are slightly more restrictive than the ones of the
previous versions (in both cases they prevent bypassing the proxy for
normal users), therefore you can choose if you want to restore the
default filters for BM3.8 by following this TID
http://www.novell.com/support/search...%200%207080929
or you can restore the older set of filters (slightly less restrictive,
but still fine), by using the instructions of this TID
http://www.novell.com/support/search...%200%207080929
(the links above shouldn't wrap).
once that is done, you can create packet filter exceptions for the IP
address that you want to let through unfiltered.
If you've BM3.8 you should have the "lite" version of Craig's book (it's
in a sub directory of the CD) and there you should have examples and
explanations on how to create packet filter exceptions for specific
protocols/ports.
Let me know if something isn't clear!
Cat
NSC Volunteer Sysop

SPA-2102 Nat Help

I can not register my line (user) with the scenario below.
spa2102 (192.168.81.254) --------| Fw-mikrotik (200.xxx.xxx.xxx)| ------| Internet | -------|( 189.xxx.xxx.xxx) Voip Provider|
I've tried NAT, STUN, port forward, but I had no success.
If I use the Grandstrean HT-386 ATA or a softphone (eyebeam), configured with STUN server (xten.stun.com), I have success.
My sap2102 configs.
Settings under Line 1 Tab
Line Enable Display Name
User ID - 2081
Password - XXXX
Use Auth ID - 2081
Auth ID - 2081
Proxy - 189.xxx.xxx.xxx
Outbound Proxy - 189.xxx.xxx.xxx
Use Outbound Proxy - yes
Use OB Proxy In Dialog - yes
Register - yes
Make Call Without Reg: - no
Register Expires - 3600
Ans Call Without Reg - no
Use DNS SRV - no
DNS SRV Auto Prefix -no
Proxy Fallback Intvl - 120
NAT Mapping Enable - yes
NAT Keep Alive Enable -yes
Dial Plan
Preferred Codec: g729
Use Pref Codec Only: no
G729a Enable
G723 Enable
G726-16 Enable
G726-24 Enable
G726-32 Enable
G726-40 Enable
Hook Flash TX Method
Settings under SIP Tab
STUN Enable - yes
STUN Server - yes
STUN Test Enable - no
Handle VIA received - yes
Handle VIA rport - yes
Insert VIA received - yes
Insert VIA rport - yes
NAT Keep Alive Intvl - 15
The Internet Access spa is working. Because I can manage it remotely.
Than's for all

Have you tried solely to use STAN server? Try to set “Use Outbound Proxy” to “No” and use the “xten.stun.com” and the STUN server. Try to ensure that the SPA2102 is using the latest firmware version. Is the “Fw-mikrotik” as router? If it id try to make sure that ports 5060-5061 are open (default SIP ports of the SPA2102). After these, try to power cycle the network and see of you will have the same problem.

OSX Server VPN NAT Help

Hello
Configured ML VPN server using the following article.
http://macminicolo.net/mountainlionvpn
Everything works fine and vpn client can go out to inet. So far so good. Now what I want to do is use StrongVPN on server and allow my vpn clients to go out my connection to strong VPN. So far everything I have tried doesn't work. :-(
Want it to look like this
MYLOCALVPNCLIENT->OSXMLVPNSERVER->SERVEROPEN VPN CLIENT to STRONGVPN
Playing with cusomNATRules:
nat on en0 from 192.168.3.0/24 to any -> (en0)
pass from {lo0, 192.168.3.0/24} to any keep state
tried chaning it from en0 to ppp0 and no go. Did different combinations and still nada. The connection on the server to STRONGVPN cfg to route all traffic through STRONGVPN.
I'd appreciate any help you can give. I'm sure I'm missing something simple.
Thanks!

Hello
Configured ML VPN server using the following article.
http://macminicolo.net/mountainlionvpn
Everything works fine and vpn client can go out to inet. So far so good. Now what I want to do is use StrongVPN on server and allow my vpn clients to go out my connection to strong VPN. So far everything I have tried doesn't work. :-(
Want it to look like this
MYLOCALVPNCLIENT->OSXMLVPNSERVER->SERVEROPEN VPN CLIENT to STRONGVPN
Playing with cusomNATRules:
nat on en0 from 192.168.3.0/24 to any -> (en0)
pass from {lo0, 192.168.3.0/24} to any keep state
tried chaning it from en0 to ppp0 and no go. Did different combinations and still nada. The connection on the server to STRONGVPN cfg to route all traffic through STRONGVPN.
I'd appreciate any help you can give. I'm sure I'm missing something simple.
Thanks!

DNS - Request for help

Hi
I am trying to set up a "caching name server" on Solaris.
This fault message is been generated.
I am not part of any domain, however my Company is on a WAN with many DNS servers attached to it.
I used the "dig" command to build up a list.
Can any one assist with this error message.
# cat /var/adm/messages |grep named
Dec 3 16:39:15 Testbox2 named[142]: [ID 295310 daemon.notice] starting (/etc/named.conf). in.named BIND 8.2.4 Sat Apr 6 14:44:58 PST 2002
Dec 3 16:39:15 Testbox2 named[142]: [ID 295310 daemon.warning] Zone "0.0.127.in-addr.arpa" (file named.local): No default TTL ($TTL <value>) set, using SOA minimum instead
Dec 3 16:39:15 Testbox2 named[142]: [ID 295310 daemon.warning] Zone "0.0.127.in-addr.arpa" (file named.local): no NS RRs found at zone top
Dec 3 16:39:15 Testbox2 named[142]: [ID 295310 daemon.error] master zone "0.0.127.in-addr.arpa" (IN) rejected due to errors (serial 2132646204)
Dec 3 16:39:16 Testbox2 named[170]: [ID 295310 daemon.notice] Ready to answer queries.
dion

Hi Colm,
Which version of the J2EE Engine do you have and which JDK?
Could you try to switch your client orb to use IIOP 1.1?
Best regards,
Viliana

Internet DNS trouble! Help!

Everything was fine until I bought the new Intel iMac. My ADSL modem with a USB connector works great with my iBook G4, but will not with the iMac. The local ISP said there are no drivers for the Intel Macs, so I'm out of luck.
So... I bought a Zoom model 5654 ADSL X5 modem, which connects via Ethernet. Everything seemed fine.. at first. In fact I am posting this on-line with it.
But about every 5 minutes I loose the DNS. All my web based look-ups fail, and I am stuck for 5 minutes. Then, magically, it comes back! My activity monitor looks like an EKG! This has ben going ever since I bought the modem. I even tried with the iBook G4, and it's the same. Works great for a few minutes, and then the DNS stops, and I have to wait it out!
Interesting, if I am downloading a large file, that will keep working. The download does not stop, showing that the NET is staying connected and just the DNS stops.
Has anyone experienced this?
I am connected to an ADSL (as I have no other option except a 56K modem). Here's some details:
Network control panel set to built-in Ethernet.
TCP/IP: Using DHCP, IP: 10.0.0.5, Subnet: 255.255.255.0, Router: 10.0.0.2
-No DNS Servers or Search Domains
-IPv6: on Auto
PPoE: Off
Appletalk: Inactive
Proxies: None
Ethernet: Auto
- I tried switching the IPv6 to OFF. No effect.
- I tried changing the Ethernet to Manual, 10baseT, half-duplex and full. No effect.
Any ideas?

Thanks for suggestion Tony. I just tried it and no change. It worked for about 10 minutes, and then the DNS failed again.
If I disconnect the modem and re-attach my old USB modem (on my G4 iBook) all is still finbe. It will stay connected and the DNS will function normally.
It's only when I hook up the new Ethernet ADSL modem/router that the DNS fails. Note that the network still stays connected as before, and long downloads continue to download even after the DNS failures.
I also noted that it appears (more testing needed to verify) that once the DNS stops working, if I go into the Network control panel and make any changes, I get the DNS back soon after - much sooner than if I just wait it out. But it still drops out after 10 minutes or so.
And just to be clear, my system is not set to sleep at any time, so it's not related to that either.
Peter

SR520 NAT Help

Hi,
I have an SR520 with the following NAT config (full config is below this). Why isn't this working?
interface FastEthernet4
ip address 98.113.43.141 255.255.255.0
ip nat outside
ip virtual-reassembly
no ip route-cache
duplex auto
speed auto
interface Vlan75
ip address 192.168.75.1 255.255.255.0
ip nat inside
ip virtual-reassembly
no ip route-cache
ip nat inside source list 1 interface FastEthernet4 overload
access-list 1 permit 192.168.75.0 0.0.0.255
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname SR520
boot-start-marker
boot-end-marker
logging message-counter syslog
aaa new-model
aaa authentication login default local
aaa authorization exec default local
aaa session-id common
crypto pki trustpoint TP-self-signed-544575191
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-544575191
revocation-check none
rsakeypair TP-self-signed-544575191
crypto pki certificate chain TP-self-signed-544575191
certificate self-signed 01 nvram:IOS-Self-Sig#1.cer
dot11 syslog
ip source-route
no ip routing
ip dhcp excluded-address 192.168.75.1 192.168.75.10
ip dhcp pool inside
   import all
   network 192.168.75.0 255.255.255.0
   default-router 192.168.75.1
no ip cef
ip name-server 4.2.2.1
no ipv6 cef
multilink bundle-name authenticated
archive
log config
hidekeys
switchport access vlan 75
interface FastEthernet1
switchport access vlan 75
shutdown
interface FastEthernet2
switchport access vlan 75
shutdown
interface FastEthernet3
switchport access vlan 75
shutdown
interface FastEthernet4
ip address 98.113.43.141 255.255.255.0
ip nat outside
ip virtual-reassembly
no ip route-cache
duplex auto
speed auto
no ip address
no ip route-cache
shutdown
interface Vlan75
ip address 192.168.75.1 255.255.255.0
ip nat inside
ip virtual-reassembly
no ip route-cache
no ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 98.113.43.1
ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat inside source list 1 interface FastEthernet4 overload
access-list 1 permit 192.168.75.0 0.0.0.255
control-plane
banner login ^CSR520 Base Config - MFG 1.0 ^C
line con 0
no modem enable
line aux 0
line vty 0 4
transport input telnet ssh
scheduler max-task-time 5000
end

Oops. Turned out 'ip routing' was not enabled.

Clients lose only DNS server. HELP!

Hello,
I've encountered a problem these days with my dns server. My clients gets a 192.168.0.1 dns server, instead of the server dhcp/dns 192.168.74.3. I verified the dhcp/dns server and everything seems to be ok. This happens all random. When I disable/enable
the LAN or use the ipconfig /release /renew command the everything works fine for half an hour or so then it's changed back to that fake dns. Any advice?
Thanks!

Hi,
When the DNS server changes to 192.168.0.1, does ipconfig /all tell you that the IP address configuration currently in use is assigned by DHCP? If so, then what is the DHCP server that assigned this configuration?
For example below the DHCP server is 192.168.1.1:
Ethernet adapter vEthernet (External Network):
   Connection-specific DNS Suffix . :
   Description . . . . . . . . . . . : Hyper-V Virtual Ethernet Adapter #3
   Physical Address. . . . . . . . . : 74-D0-2B-29-B8-C7
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   IPv6 Address. . . . . . . . . . . : 2002:47e3:d1e6::1000(Preferred)
   Lease Obtained. . . . . . . . . . : Sunday, March 15, 2015 8:18:25 PM
   Lease Expires . . . . . . . . . . : Thursday, March 19, 2015 2:57:22 PM
   Link-local IPv6 Address . . . . . : fe80::3d23:1628:df91:c45d%23(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.1.10(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Sunday, March 15, 2015 8:18:24 PM
   Lease Expires . . . . . . . . . . : Thursday, March 19, 2015 8:19:11 PM
   Default Gateway . . . . . . . . . : fe80::6a1:51ff:fecc:42c4%23
                                       192.168.1.1
   DHCP Server . . . . . . . . . . . : 192.168.1.1
   DHCPv6 IAID . . . . . . . . . . . : 578080811
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-19-DC-3E-8C-74-D0-2B-29-B8-C7
   DNS Servers . . . . . . . . . . . : 192.168.1.1
   NetBIOS over Tcpip. . . . . . . . : Enabled
If you can identify the DHCP server that is providing this DNS server to you, then you can shut it down. This might be a rogue DHCP server on the network, probably using itself as a DNS server.
-Greg

How to set up DNS behind a NAT router...

I am trying to configure DNS in Panther Server as the SOA for my domains and as a LAN name server. I've read several explainations about setting up DNS including technical document 106853 "How to set up DNS in a NAT environment" which says:
Note: For Mac OS X Server 10.3 or later, you should use the Server Admin
application to configure DNS and NAT. Please see the Network Services
Administration Guide for additional information.
Seeing how picky BIND is, this sounds like a good idea, except I can't configure views like that.
Questions:
1) What happens if I create an A record in my main domain for newmac.mydomain.com-->10.0.1.2? People outside the LAN can't get to it, right?
2) Can I create really simple names for the LAN like newmac-->10.0.1.2?
Thanks!

You can use "system-config-network" command to configure your DNS configuration.

Iv'e had my mac for 2 weeks & now have a problem with safari since I changed to a wireless super hub. It will not open a web site I use my iPad & windows lap top will. Apple support say it's the DNS settings cable say there okay please can anyone help

Iv'e had my mac for 2 weeks safari was working great until I changed to a wire less super hub. Safari will not let me open & log into a web site I go on a lot. My ipad & windows lap top will on the same network. Apple have said it's the DNS setting my cable provider say it's not it's a problem with my mac. Iv'e phoned apple lots of times same with cable provider Iv'e tried a few things it has not helped solve the problem. I'm now advised to return my mac to the shop for a check. Has anyone else had this problem I would appreciate any help because I'm going round in circles.

Adding a couple of DNS numbers sometimes helps:
System Preferences>Network, select your wifi or ethernet network on the left and click on the 'advanced' button and then the DNS tab. On the left side of the window make a note of any DNS numbers listed so that you can re-instate them if necessary and then click on the '+" button bottom left of the window. Type 8.8.8.8 and click the + again and type 8.8.4.4 save the settings and try the website again.
BTW, I have the same problem with Firefox not letting me input my password in secure sites. I did find a workround in the network settings in Firefpx prefs, but it didn't stick so I reverted to using Chrome as alternative browser. No problems with that so long as you don't mind Google looking over your shoulder

Server Setup Help - DNS

Hi,
Hopefully someone can shine a light on this for me. I am sure I have confused myself more by doing all this research.
I am attempting to setup OS X Server (Leopard Server 10.5.4) on my server and am getting a little confused at the primary DNS Name setup screen.
I have a domain, lets call it macserver.com. It currently does not have any hosting. I plan on hosting it on my own server. I also created an A record (remote.macserver.com) and pointed it to my static IP address that my ISP gave me for remote desktop purposes, and eventually forward all MX records to it as well.
I can ping the A record address (remote.macserver.com) from any other network just fine so I know that is working.
My question is what do I put into the Primary DNS Name section during the setup? Would that be my domain name (macserver.com) or the remote.macserver.com? Should my server name be remote? Or could it be anything I want?
I currently don't have any dns servers. The AEBS is doing DHCP and handling the DNS as well. From my understanding I can setup the server to handle the DNS, and then just put in the DNS information (ip address) for my server in the AEBS setup screen and all should be good.
Thanks for the help.!!
I am not an expert at DNS so any help would be appreciated

My question is what do I put into the Primary DNS Name section during the setup? Would that be my domain name (macserver.com) or the remote.macserver.com? Should my server name be remote? Or could it be anything I want?
From your description, your 'domain name' is 'macserver.com'.
Your server name is 'remote', and your fully-qualified domain name is 'remote.macserver.com'.
Note that you don't have to call your machine 'remote'. You can have multiple DNS records pointing to the same machine, so your machine could be called 'fred', but have DNS CNAME's that point 'remote.macserver.com', 'jack.macserver.com', and 'www.macserver.com' to the same machine. Other users use one (or any) of the names to get to the machine.

DNS or NAT help

Similar Messages

Maybe you are looking for