No, the PIX "translates" the response in a DNS proxy manner. This helps when a host has a static translation using the pix.
For example, imagine the 10.0.0.1 (inside) and 200.33.76.1 (outside) pair. The external BIND will answer the query with the external IP, but the PIX will translate the answer so the inside client won't have to "go" outside. please review this link: NAT command (note the "dns" keyword) http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/mr.htm#1032129 ALIAS command (might not be useful to you) http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/ab.htm Hope it helps some Luis Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=72894&t=72685 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]