Redirection ???

[rangerman]

A bit new to Pix and this forum, just wonder if anyone has a quick clue of how to do this.

Currently Pix 515e

I type in a web browser - say

http://www.dog.com

which has an ip address of 1.2.3.4 and it times out on the port as we need to direct it to the inside address of 192.168.11.106

Any ideas of how to do this would be great, thought it was a Nat command or redirect ?

Thanks guys

 

[lgarner]

Are you using an internal DNS server? If there's a static NAT on the Pix for that server, the DNS reply should already be translated to the internal address.

Check if there's a "sysopt nodnsalias" statement in the Pix configuration.

If your FOS version is earlier than 6.2 (I think) you can add "alias (inside) 192.168.11.106 1.2.3.4 255.255.255.0"

 

[rangerman]

Wow that was quick, I will try and have a look at it tonite if I get time - Thanks

Yes we are using an internal DNS but somehow it's not translating.

Thanks will keep u informed

 

[lgarner]

OK. The issue is that the Pix will not permit traffic to go out the port on which it arrives. So, if your internal DNS server is giving you the public address (on the Pix outside interface), then you're effectively trying to relay traffic through the Pix- won't work.

If you're using internal DNS and it's giving you the public address, then that's issue to fix (but the above is the reason that you can't get away with it).