Cant ping our external IP's 1

[leploep]

Hello,

At this moment we are unable to connect to our own websites using the external ip.
The internal ip works fine. So i solved the issue by setting our local dns to route the url's to the internal IP's.
But I think this is not the proper way to do it.

Does this problem ring any bell? Did some of you experience this before? And if yes, what did you do about it?

 

[Whoheard]

Are you saying you can't get out of the network? Or, are you just not able to resolve to the external addresses?

bob

 

[StarTAC]

at the network layer, can u ping your external IP, from the inside.. if not, there is sthing else wrong.. perhaps, it could be the routing and/or your NAT configuration.. it's not solely a DNS problem..

good luck..

 

[leploep]

Thanx for your answers.

yes I cannot ping the external IP from inside, like u said Startac. I'm going to have a look at the NAT now. Didn't think of it before.... I thought it would be a common misconfigure on the router that alot of people experienced.

and yes i know its not a DNS problem. I just used the DNS to make it work for now.
I solved it by routing our own urls to 192.168... instead of the external ip's. And it works fine, but its ofcourse a workaround, and i'd rather have things runnig correctly.

But thanx again for your answers

 

[gaveeve]

leploep, We do exactly as you do on our 10.0.0.0 internal network. From nodes inside the network the public ip (for dns servers, this is a very large network with many remote locations)would not work. The public ip would be directed out to the internet and the only way it could find the internal server would be if another router directed it back in(not happening). So on DNS servers we forwarded as you do. This has worked very well for us. I don't think this is so much a workaround as an effort to preserve the security of the internal networks.
It also allows us to use our web sites with one ip to other internal websites. Before we had to differentiate between whether a website was internal or external to the network and many of the normals found this confusing.

 

[leploep]

Ok that sounds good.
So I guess i'll leave it like it is.

Thanx for your answer gaveeve