[c-nsp] ASA Static Translations / DNS Doctoring

2009-07-17 Thread Clue Store
Hi All, I'm trying to do DNS doctoring on an asa and for specific reasons I need to map several different (public) outside IP's the one inside ip as shown below. *static (inside,outside) 208.x.x.25 192.168.100.10 netmask 255.255.255.255 dns* *static (inside,outside) 208.x.x.26 192.168.100.10

Re: [c-nsp] ASA Static Translations / DNS Doctoring

2009-07-17 Thread Luan Nguyen
@puck.nether.net Subject: [c-nsp] ASA Static Translations / DNS Doctoring Hi All, I'm trying to do DNS doctoring on an asa and for specific reasons I need to map several different (public) outside IP's the one inside ip as shown below. *static (inside,outside) 208.x.x.25 192.168.100.10 netmask

Re: [c-nsp] ASA Static Translations / DNS Doctoring

2009-07-17 Thread Clue Store
...@puck.nether.net] On Behalf Of Clue Store Sent: Friday, July 17, 2009 12:47 PM To: cisco-nsp@puck.nether.net Subject: [c-nsp] ASA Static Translations / DNS Doctoring Hi All, I'm trying to do DNS doctoring on an asa and for specific reasons I need to map several different (public) outside IP's

Re: [c-nsp] ASA Static Translations / DNS Doctoring

2009-07-17 Thread Andrew Yourtchenko
On Fri, 17 Jul 2009, Clue Store wrote: Hi All, I'm trying to do DNS doctoring on an asa and for specific reasons I need to map several different (public) outside IP's the one inside ip as shown below. *static (inside,outside) 208.x.x.25 192.168.100.10 netmask 255.255.255.255 dns* *static

Re: [c-nsp] ASA Static Translations / DNS Doctoring

2009-07-17 Thread Luan Nguyen
...@puck.nether.net] On Behalf Of Andrew Yourtchenko Sent: Friday, July 17, 2009 2:28 PM To: Clue Store Cc: cisco-nsp@puck.nether.net Subject: Re: [c-nsp] ASA Static Translations / DNS Doctoring On Fri, 17 Jul 2009, Clue Store wrote: Hi All, I'm trying to do DNS doctoring on an asa and for specific

Re: [c-nsp] ASA Static Translations / DNS Doctoring

2009-07-17 Thread Roland Dobbins
On Jul 18, 2009, at 1:08 AM, Clue Store wrote: I have several domains pointed various ip's in a /27 (public block). I have one internal webserver inside of my network. I would like to be able to map the several outside IP's to one inside IP of my web server and perform DNS doctoring via

Re: [c-nsp] ASA Static Translations / DNS Doctoring

2009-07-17 Thread Clue Store
Hi Andrew, Thanks for the reply. I understand the static function which was why I was asking if there was a to do DNS doctoring via another method instead of the static command. I take it that the answer is no. I also have the option of mapping all domains to one public, but this at the

Re: [c-nsp] ASA Static Translations / DNS Doctoring

2009-07-17 Thread Clue Store
Hi Roland, I agree that this is not a good idea, solution, or practice, but when one is requested to perform a task a particular way and that task is what generates my revenue, best practice does not apply. Had this been my own shop, there would have been some different engineering for this

Re: [c-nsp] ASA Static Translations / DNS Doctoring

2009-07-17 Thread Roland Dobbins
On Jul 18, 2009, at 2:05 AM, Clue Store wrote: I agree that this is not a good idea, solution, or practice, but when one is requested to perform a task a particular way and that task is what generates my revenue, best practice does not apply. For myself, I'd refuse to do the work due to