Need help with DNS behind firewall

[Kevin Darcy]

Casper Doppen wrote:

> I've set up a DNS on my LAN (domain ???.hme). De DNS has IP 192.168.1.3
> The Gateway/Firewall has IP 192.168.1.1, and is using a ppp-connection
> to the internet.
> Some workstations on the LAN are Windows95 systems. It all works when I
> have the DNS's set up in de network properties to look first for an
> external DNS (for example 1.2.3.4) and second for 192.168.1.3. But this
> way all requests for LAN-addresses are also sent to the external DNS,
> and that's what I do not want (.hme is not a registerd domain, just
> local).
> I would like to have set up 192.168.1.3 as only DNS for all
> workstations. If the DNS doesn't know a requested name the DNS should
> contact the external DNS (1.2.3.4).
>
> I tried this :
>
> /etc/resolv.conf:
> nameserver 127.0.0.1
> nameserver 1.2.3.4
> search debian.hme slack.hme.xterm.hme win.hme hme
>
> /etc/named.conf starts with :
> options {
>              directory "var/named";
>              forwarders { 1.2.3.4; };
>              query-source address * port 53;
> };
>
> With this configuration I am able to surf on the internet with this
> machine (192.168.1.3) because of the second line in resolv.conf. But
> when I start nslookup and ask for external URL's I get the message
> "localhost can't find [URL]: Non-existing host/domain".
>
> Does anybody know what I am doing wrong ?
> Please reply to ng and email.

Have you tried it *without* the query-source option? Maybe something is
blocking UDP port 53.


- Kevin