Re: [cobalt-users] OT: Reverse DNS behind firewall

["E.B. Dreger" <eddy+public+spam@xxxxxxxxxxxxxxxxx>]

a> Date: Mon, 20 Jan 2003 15:35:43 -0500
a> From: agility


a> After the install, all of my sites will be use private IP
a> addresses and be accessable via the NAT in the firewall box
a> and forward dns behind the wall.

Are you using 1:1 NAT?  Hopefully not port forwarding...


a> I just don't understand how a reverse dns would work if it is
a> outside of the firewall (ie at my uplines site) and cannot see
a> how it would work behind the firewall.

Whoever is responsible for the reverse DNS zone must add the
appropriate entries.


a> (ie. the reverse dns outside would be unable to access the
a> private ips.  and if inside the firewall, how would the
a> private ips be referred to from the outside.)

I'm not quite sure what you're asking.  If you want to demux a
single public IP address to a range of RFC1918-reserved ones
without resorting to port perversion, forget it.


a> So in a nut shell...  Can reverse dns be inside a firewall
a> (Pretty sure the answer has to be yes.)  If so, can anyone
a> point me to a howto or good readme on the subjetc.

I'm unclear if your question is on DNS, or more of a network
architecture issue.  Can you please elaborate and clarify a
bit?


Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 (785) 865-5885 Lawrence and [inter]national
Phone: +1 (316) 794-8922 Wichita

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist@xxxxxxxxx>
To: blacklist@xxxxxxxxx
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <blacklist@xxxxxxxxx>, or you are likely to
be blocked.