LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 02-26-2005, 08:02 AM   #1
njdownes
LQ Newbie
 
Registered: Feb 2005
Posts: 10

Rep: Reputation: 0
Dns (bind)


Hi all. Just wondering if any of you could help me out here.

Basically, I have two servers here and one external IP address.

I have MX records on the internet for both machines pointing at the same external IP address.

linux.njdownes.com is the name of the DNS server (web server also running) which points to 80.7.13.151
I also have njd-vaio.njdownes.com (mail and web server running on this server) set up to point to 80.7.13.151.

The internal IP's are:

192.168.2.2 - linux.njdownes.com
192.168.2.3 - njd-vaio.njdownes.com

I basically need to set my DNS server up, so that requests hitting the DNS server for njd-vaio.njdownes.com get forwarded on to njd-vaio.njdownes.com.

I tried doing this before, but when doing an nslookup on the DNS server, you would get the external IP and the internal IP shown.

Any help with this would be appreciated.

If I've left any info that you need to know out, let me know.


Many thanks in advance.
 
Old 02-27-2005, 03:31 PM   #2
hob
Senior Member
 
Registered: Mar 2004
Location: Wales, UK
Distribution: Debian, Ubuntu
Posts: 1,075

Rep: Reputation: 45
I'm not entirely sure what you're trying to do. You've only got one public IP address, so all externally available services need to be using that IP address. The easy solution is to put all of the services on one physical machine - DNS, Web and mail all have very low starting requirements (i.e. at least a 486). You can also use port forwarding so that whatever machine is on the external IP address forwards connections for particular ports to another machine. Your Linux box can do port forwarding for any ports you like, or you can assign the external IP to a router which will host no services of it's own but merely forward connections to the appropriate Linux box.

Hope that helps
 
Old 02-27-2005, 03:48 PM   #3
njdownes
LQ Newbie
 
Registered: Feb 2005
Posts: 10

Original Poster
Rep: Reputation: 0
Thanks for the advice.

I'm doing exactly what you said at the minute - simple and it works.

Though, I'd like to know how to sort out a zone that could be used internally only.

Would I have to set up a zone for 192.168.2.x and then set ACL's so that it is not externally viewable?
I tried it before but the internal IP and external IP were showing when doing a DIG of NSLOOKUP on the internet.
 
Old 02-28-2005, 09:15 AM   #4
hob
Senior Member
 
Registered: Mar 2004
Location: Wales, UK
Distribution: Debian, Ubuntu
Posts: 1,075

Rep: Reputation: 45
OK, I think I understand - your forward lookup zone has internal IPs in it that shouldn't be shown to outside systems.

It's not a huge security issue as private IPs addresses obviously can't be reached, but I beleive that you can define "views" on zones with BIND 9 so that different systems get different results.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
DNS and bind kevinm2 Linux - Networking 1 06-15-2005 10:18 PM
DNS Bind TKS Linux - Networking 6 05-03-2004 12:30 AM
DNS and Bind pharpe Linux - Networking 3 01-15-2003 02:54 PM
DNS and BIND buttnutt Linux - Networking 5 06-08-2002 06:02 PM
DNS and BIND dilberim82 Linux - General 10 07-13-2001 10:31 AM


All times are GMT -5. The time now is 10:02 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration