-----Original Message-----
From: Fred Viles <[EMAIL PROTECTED]>

>
>On 11 May 99, at 17:52, Derek Evans wrote about
>    "Re: [Masq]  Re: please help with ip":
>
>| From: Fred Viles <[EMAIL PROTECTED]>
>|...
>| >| You should have two DNS zones.  One for external IPs and one for
internal
>| >| IPs.
>| >
>| >Either two zones on the same server, with the internal zone using a
>| >non-standard TLD (like company.cxm instead of company.com).  Or,
>| >better yet, run a separate server for the internal zone.  Your public
>| >server publishes only the names you want the world to know about with
>| >their public IPs, while your internal server's zone files include
>| >*all* your hosts and their intenal IPs.
>|
>| I maintain my zone at The Public DNS.
>
>So you have no DNS servers running on your own machines at all?  And
>all of your machines are configured to query your ISP's (or Public
>DNS') server for name resolution?


Correct.  I have a very small network, and have all machines using my ISP's
DNS.

>|     So what you're talking about is to
>| run a DNS server on my masq box specifically for internal machines, which
>| would serve the same names as at The Public DNS but point to internal
IP's?
>
>That's right.  You could run the server on any machine on your net,
>it doesn't have to be the masq box.  You should set it up as a
>caching server, authoritative for your domain, and point all your
>client machines at it.
>
>But I'm a bit confused.  If you have routable IPs allocated for all
>of your machines, why are you using private addressing and
>masquerading in the first place?


I only have 1 routable IP, assigned to the masq box -- the other 2 machines
connect using masquerading.

Because my network is so small, I could always use a hosts file instead of
using a local DNS but I'll probably set up the DNS anyway...it'll be fun.

Thanks for your help.

Derek




_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]

Reply via email to