Newbie: DNS and NAT?

john-paul delaney jp at justatest.com
Tue Sep 18 12:31:53 UTC 2001


On Tue, 18 Sep 2001, Brad Knowles wrote:

> 	The problem with trying to do DNS through a NAT device is that if 
> the machine doesn't see itself on the list of authoritative 
> nameservers, it will answer non-authoritatively (which would mean 
> that your secondaries/slaves would consider your primary/master to be 
> broken, and would be unable to get a good zone transfer from you). 
> But, if you list the machine's private IP address in the zone as well 
> as it's public one (assuming that you have a static IP address 
> assigned to you by your ADSL provider), then people are going to be 
> unable to contact your primary/master reliably.


Thanks for the reply Brad...

Opting from your various suggestions to also list the private IP in the
zone - supposing the machine will answer authoritively, and the transfer
to secondary will succeed, but there's going to be problems with
contacting the primary:

How serious are the problems?  Is there a way to set a "preferred" IP (of
the two) for a domain?

I have a static address but it's bound to the router, which acts as a
separate device to the nameserver machine (as opposed to an adsl modem
which would be just another network interface on the machine - am I
correct in saying that?).

thanks again,
/j-p.
-- 

 alternative art online
 http://www.justatest.com/



More information about the bind-users mailing list