DNS behind firewall?

Kevin Darcy kcd at daimlerchrysler.com
Thu Dec 12 16:55:17 UTC 2002

Terry wrote:

> Does anyone have put the DNS server behind firewall? I tried to put a
> hardware firewall (an IP-share router) in front of the DNS server,
> however, I don't know how to make it works. Because the server gets a
> 192.168.x.x IP from the router, so when I setup the DNS, the IP will
> be 192.168.x.x but not my real static IP address. What can I do to
> make it work?  By the way, do I need to open 88 port in order to
> enable the web server of IIS? I open 80 port but when I connect to the
> web site, a pop-up window ask me the ID and PWD.

Inbound, you'll need to both NAT and port-forward. Outbound, I think you
only need to NAT (because the source and destination ports should already
be OK). However, I've never actually tried to run a DNS server behind a
NAT firewall, so take this with a grain of salt...

- Kevin

More information about the bind-users mailing list