DC on one subnet - all workstations on another?

[schase]

Hi folks,

I'm trying to get my openBSD Router to work properly. Everything works except when the LAN needs to see websites on the LAN.

The problem is with no budget I only have one server that acts as DC & also hosts DNS & websites. I just do not have a budget to get a separate server for website hosting yet. Anyway the problem is - the openBSD Packet Filtering has severe difficulties routing back through the same interface for the lan to get on websites hosted on our sever (accessible either on LAN or WAN).

Now I can solve this if I put the DC/IIS server on a different subnet. However, how do I configure AD and DNS to let the clients still find & authenticate with the DC & still be able to do workstation to workstation mapping, etc.?

Thank you in advance.

Stuart

 

[dberg35]

What subnet ranges are you planning on using?

 

[schase]

thanks, we got it anyway,

In case someone else runs into this on an openBSD router - you just need to search for RDR & NAT - it'll shed some light on it.

Stuart