Dear all,

I am running my network behind firewall on suse linux 10.1
For only one machine ( Ex. 192.168.1.100 ). I got full permissions in firewall, and for other machines there is no internet. So what i try to do is to configure a forward dns server in the 192.168.1.100
and from the client i can resolve the public address like ( google, yahoo) but via browser i cant able to access internet. I know that configuring a squid proxy server will do it for me . But i want to know how to solve this .Can some one help in this case.

Thanks
Shan

If I understand you correctly, your client pc's are blocked by the firewall and only your dns server can access the internet through the firewall. In that case you will have to accept traffic from your client ip's on your firewall. If you don't want to do this you will have to go the proxy route.

Hope this helps

What you are saying is correct but when i query for a nslookup from the client to a public site via forward dns i am getting response so why query from the firefox is not resolving

If your client pc's are getting their dns query resolved by your dns server then they will resolve the name.

When you run and nslookup which server responds to the query?

All sites like ( yahoo, google, linuxquestions.org, etc.. )

Sorry let me clarify a bit.

Here is the result of an nslookup to google.

nslookup www.google.com
Server: My DNS server
Address: My DNS server

Non-authoritative answer:
www.google.com canonical name = www.l.google.com.
Name: www.l.google.com
Address: 66.102.9.104
Name: www.l.google.com
Address: 66.102.9.99
Name: www.l.google.com
Address: 66.102.9.147

The My DNS server is the server that responds to the nslookup query. What does your nslookup result look like?
Which server is your gateway?

This is the nslookup output from the client machine
MyLinux:~ # nslookup google.com
Server: 192.168.1.100
Address: 192.168.1.100#53

Non-authoritative answer:
Name: google.com
Address: 64.233.187.99
Name: google.com
Address: 72.14.207.99
Name: google.com
Address: 64.233.167.99

The dns server is the ip is my local intranet server ip only.

So what is happening now is your client is getting it's DNS information from 192.168.1.100 and google resolves. But your firewall only allows your 192.168.1.100 IP access to the interent, your client has no way of getting to the internet and so caanot get to the google webpage.

So you will have to add a rule to accept from source ip range of 192.168.1.0/24, this will allow your client to get to the internet. You will also have to specify your firewall as the default gateway for your client.

If you don't want to change your firewall, then you could try setting 192.168.1.100 as the default gateway and activate ip forwarding on that eth interface. This one might work.

And lastly you could set up a proxy server.