[nsp] dns forwarding

[Church, Chuck]

IP helper deals with broadcasts.  You've got unicast DNS queries being
directed towards the router itself, right?  IP helper won't touch those.
A creative NAT is the answer here, I believe. 


Chuck Church
Wam!Net Government Services - D&I Team
Lead Design Engineer
CCIE #8776, MCNE, MCSE
1210 N. Parker Rd.
Greenville, SC 29609
Office: 864-335-9473
Cell: 703-819-3495
cchurch at wamnetgov.com
PGP key:
http://pgp.mit.edu:11371/pks/lookup?op=index&search=cchurch%40wamnetgov.
com

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Roger
Sent: Wednesday, July 07, 2004 1:17 PM
To: Hector R. Barragan
Cc: cisco-nsp at puck.nether.net
Subject: Re: [nsp] dns forwarding

Hector R. Barragan wrote:

>Have your tried these commands
>
>
>
>ip helper-address x.x.x.x
>ip forward-protocol udp domain
>  
>
Yes....

!
inter eth0
ip address <public ip>
ip nat outside
!
inter eth1
ip address 192.168.0.1 255.255.255.0
ip helper-address <public_dns_ip>
ip nat inside
!
ip nat inside source list internal interface Ethernet0 overload !
ip access-list standard internal
   permit 192.168.0.0 0.0.0.255
ip route 0.0.0.0 0.0.0.0 <gateway>


People have suggested this config will allow me to do dns queries on
192.168.0.1 and the helper address will relay that query to the dns
server.  So far this is not the case..

I've tried the below commands...

nslookup www.yahoo.com 192.168.0.255      <- didn't expect this to work 
but I'll try..
nslookup www.yahoo.com 192.168.0.1

Niether worked.

-- 
Rock River Internet                          Roger Grunkemeyer
202 W. State St, 8th Floor                grunky at rockriver.net
Rockford, IL 61101                           815-968-9888 x102

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/