#1
  1. o0o.o0o
    Devshed Newbie (0 - 499 posts)

    Join Date
    Feb 2001
    Location
    m00n
    Posts
    194
    Rep Power
    102

    DNS Server behind firewall -- external or internal ip?


    Ok, I am setting up my dns server behind an internet router by DLink. Behind the router, I have a LAN.

    I have the router to allow in port 80 (httpd), 22 (sshd), and 21 (ftpd). If one of these requests are made, then the router points it to my FreeBSD machine that runs all these services. It also has Bind on it, and I will use it as my DNS. My ultimate goal here is to use it as a name server so that I can point a domain name to it, and I want to use it as a name server to point to itself.

    Anyway, I am using a static ip address assigned to me by @home to get to the website externally (24.21.189.250). The internal ip on the lan is 192.168.0.103 .

    My question is, which ip do I use when setting up bind. Do I use the external or the internal?

    I assume that I will have to open up port 53, is this correct?

    Also, this will be my primary name server, and I plan to use a friend who has bind running as the secondary.

    Thanks,

    Brett
  2. #2
  3. No Profile Picture
    Contributing User
    Devshed Newbie (0 - 499 posts)

    Join Date
    Jan 2001
    Posts
    4
    Rep Power
    0
    >> which ip do I use when setting up bind. Do I use the external or the internal?

    You don't need to set IP to bind. However, your zone files need to point to your external IPs.

    >> I will have to open up port 53, is this correct?

    Yes and both TCP/UDP. Normally dns query uses UDP 53, but when packet coming in is larger than 512 bytes (non RFC-compliance), TCP 53 will be used instead. TCP is also being used when doing zone transfer.
  4. #3
  5. o0o.o0o
    Devshed Newbie (0 - 499 posts)

    Join Date
    Feb 2001
    Location
    m00n
    Posts
    194
    Rep Power
    102
    Originally posted by freebsd
    >> which ip do I use when setting up bind. Do I use the external or the internal?

    You don't need to set IP to bind. However, your zone files need to point to your external IPs.

    >> I will have to open up port 53, is this correct?

    Yes and both TCP/UDP. Normally dns query uses UDP 53, but when packet coming in is larger than 512 bytes (non RFC-compliance), TCP 53 will be used instead. TCP is also being used when doing zone transfer.
    Yes, zone, thats what I meant. Thanks.

    Brett

IMN logo majestic logo threadwatch logo seochat tools logo