Pix 506 and DNS

[StupraTT]

I searched around for some info on a problem im having.
I have a PIX 506 firewall hooked to my DSL, and an exchange server behind it.

I am having some intermitant DNS resolution issues, they last for a day or so, then go away. I want to put a DNS server on the inside of the fire wall, and want to know how to set it up so all DNS requests will function, do i set up a conduit on port 53 for tcp and udp or what?

Any help would be GREATly appreciated!

Thanks
Stupra

 

[sh0x]

Let me know if you still need help with this. I'll need a bit more details on your exisiting infrastructure but I can help.

Jason
jlong@menders.com

 

[yizhar]

HI!

I think that your internal DNS server will work without further configuration of the PIX, but I recomend these 2 steps:

1) On the internal DNS server configure it with your ISP DNS servers as forwarders.
This will improve performance, and also might prevent problems with the firewall even so I think it should work anyway.

2) Don't forget to configure the server itself and the other clients and servers to use the new DNS server. In a small network you can simply install and activate the DNS servics on your EXCHANGE server.

Bye

Yizhar Hurwitz

http://teachers.sivan.co.il/yizhar

http://come.to/yizhar