Mail and Web Server behind a firewall

[Wil McGilvery]

So that makes this even easier.

You can set up the order of resolving names to being the host file first and DNS second.

In you DNS you have a zone for which contains the external IP address. Everyone see that who queries your DNS. In you host file, you put the local ip addresses.

You server will check the host file and stop because it found the local ip addresses and is happy. The rest of the world will query the DNS and find the external ip address and they will be happy.

I have used this setup before and it works very well.

Or

You can run 2 instances of Bind. I have never used the bind views mentioned earlier.

Regards,

Wil McGilvery
Manager
Lynch Digital Media Inc

         

416-744-7949
416-716-3964 (cell)
1-866-314-4678
416-744-0406  FAX
www.LynchDigital.com


-----Original Message-----
From: Kareem Shehata [mailto:kareem-d+8TeBu5bOew5LPnMra/2Q at public.gmane.org] 
Sent: Monday, November 24, 2003 10:54 PM
To: tlug-lxSQFCZeNF4 at public.gmane.org
Subject: RE: [TLUG]: Mail and Web Server behind a firewall

On Mon, 2003-11-24 at 20:12, Wil McGilvery wrote:
> Why not just use a hosts file for internal resolution.
> 
> How many machines are we talking about?

The problem isn't internal machines finding the server, it's the
services on the server becoming concerned.  I use name-based virtual
servers in Apache, which will scream if the DNS entry for the virtual
server name doesn't match the IP of the interface.  Not sure about
qmail, but I have a feeling it won't like it much either.

Surely someone else on the list has run into a similar problem, and
hopefully come up with an elegant solution?

Kareem

-- 
/*********************************************************************
      kareem-d+8TeBu5bOew5LPnMra/2Q at public.gmane.org   -   Kareem Shehata   -   416-676-6611     
 --------------------------------------------------------------------
  Doubt is not a pleasant condition, but certainty is an absurd
  one.
    -- Voltaire
 ********************************************************************/

--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml
--
The Toronto Linux Users Group.      Meetings: http://tlug.ss.org
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://tlug.ss.org/subscribe.shtml