<HTML>
<HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META content="OPENWEBMAIL" name=GENERATOR>
</HEAD>
<BODY bgColor=#ffffff>
<font size="2">Well,
<br />
<br />I can see one problem right off the bat.
<br />
<br />A quick name resolution check for www.radiotowerinstallers.com returns a good IP of 216.132.149.200. Although a check or radiotowerinstallers.com returns 10.0.0.200. And later checks of the name www. also returned the 10.0.0.200.
<br />
<br />The same checks of both comsiteconstruction.com and www.comsiteconstruction.com returns the IP address 10.0.0.140. THAT ain't gonna work!
<br />
<br />It appears you've got some DNS resolutions issues to straighten out first.
<br />
<br />
<br />
<br />But from someone who takes care of companies Cisco routers and BQ/BX servers - let me say that you're better off just putting the real-world IP on the server itself. If you're just using a Cisco 3700 and doing one-to-one NAT - you're not doing any favors using private address space inside and NAT on the router. Plus, you're going to cause yourself other problem with protocols like FTP (do you know how to go into the proftpd.conf and put in the real world IP for those sites - so they'll work??).
<br />
<br />And even if you're doing other things with the Cisco like filtering or making use of the firewall feature set - I still can't understand using private addresses on the inside servers. You can still filter with access lists and use the firewall feature set with the real-world IPs directly on the servers. We do!
<br />
<br />
<br />
<br />Chuck
<br />
<br />
<br /><b>---------- Original Message
-----------</b>
<br />
From: Titus Bolton <titus@antennasystems.com>
<br />
To: BlueOnyx General Mailing List <blueonyx@blueonyx.it>
<br />
Sent: Thu, 2 Dec 2010 09:41:38 -0600
<br />
Subject: [BlueOnyx:05984] 1:1 NAT and DNS - Domains not resolving regularly
<br />
<br />> Greetings and Salutations:
<br />>
<br />> I have an issue with domain
names not resolving, and I am pretty sure it has something to do with our
NAT'ing and our DNS, though I cannot be positive.
<br />>
<br />>
<br class="webkit-block-placeholder" />
<br />> We host a large number of domains, and
we have noticed that the domains are not resolving properly outside of the local
network. Two of the domains are <a href="http://comsiteconstruction.com/">comsiteconstruction.com</a> and <a href="http://radiotowerinstallers.com/">radiotowerinstallers.com</a>.
<br />>
<br />> When I ping them I get something to the extent of:
<br />>
<br />>
ping <a href="http://radiotowerinstallers.com/">radiotowerinstallers.com</a>
<br />> PING
<a href="http://radiotowerinstallers.com/">radiotowerinstallers.com</a>
(10.0.0.200): 56 data bytes
<br />> 64 bytes from <b>10.0.0.200</b>: icmp_seq=0
ttl=64 time=50.060 ms
<br />>
<br />> ping <a href="http://comsiteconstruction.com/">comsiteconstruction.com</a>
<br />> PING
<a href="http://comsiteconstruction.com/">comsiteconstruction.com</a>
(10.0.0.140): 56 data bytes
<br />> 64 bytes from <b>10.0.0.140</b>: icmp_seq=0
ttl=64 time=40.006 ms
<br />>
<br />> Pings from outside our network
<br />> <a href="http://network-tools.com/default.asp?prog=ping&host=comsiteconstruction.com">http://network-tools.com/default.asp?prog=ping&host=comsiteconstruction.com</a>
<br />>
<br />> Ping 216.132.149.141
<br />>
<br />> [<a href="http://comsiteconstruction.com/">comsiteconstruction.com</a>]
<br />>
<br />> Round trip time to 216.132.149.141: 417 ms
<br />> Round trip time to
216.132.149.141: 529 ms
<br />> Round trip time to 216.132.149.141: 723
ms
<br />> Timed out
<br />> Timed out
<br />> Timed out
<br />> Round trip time
to 216.132.149.141: 501 ms
<br />> Timed out
<br />> Round trip time to
216.132.149.141: 508 ms
<br />> Round trip time to 216.132.149.141: 173
ms
<br />>
<br />> Average time over 10 pings: 285.1 ms
<br />>
<br />> <a href="http://network-tools.com/default.asp?prog=ping&host=radiotowerinstallers.com">http://network-tools.com/default.asp?prog=ping&host=radiotowerinstallers.com</a>
<br />>
<br />> Ping
<br />>
<br />> [<a href="http://radiotowerinstallers.com/">radiotowerinstallers.com</a>]
<br />>
<br />> Bad destination
<br />> Bad destination
<br />> Bad destination
<br />>
Bad destination
<br />> Bad destination
<br />> Bad destination
<br />> Bad
destination
<br />> Bad destination
<br />> Bad destination
<br />> Bad
destination
<br />>
<br />> Average time over 10 pings: 0 ms
<br />>
<br />>
We're using a Cisco 3700 with a 1:1NAT. The webservers are configured with
the internal IPs.
<br />>
<br />> Here's a link that gives some more
information regarding our DNS issues:
<br />> <a href="http://www.dnsstuff.com/tools/dnsreport?domain=comsiteconstruction.com&format=raw&loadresults=true&token=2631b81c48a7cd4d17c01c08180f2013">http://www.dnsstuff.com/tools/dnsreport?domain=comsiteconstruction.com&format=raw&loadresults=true&token=2631b81c48a7cd4d17c01c08180f2013</a>
<br />>
<br class="webkit-block-placeholder" />
<br />> Please let me know if I can give
any more information.
<br />>
<br />>
<br class="Apple-interchange-newline" />Kind regards,
<br />>
<br />> <font size="3" face="Verdana" class="Apple-style-span"><span style="font-size: 12px;" class="Apple-style-span"><font size="2" class="Apple-style-span"><span style="font-size: 10px;" class="Apple-style-span">Titus Bolton
<br />> Antenna
Systems & Solutions, Inc.
<br />> 931 Albion Avenue
<br />> Schaumburg,
Illinois 60193-4550
<br />> United States of America
<br />> Phone:
+1-847-584-1000 Fax: +1-847-584-9951
<br />> <a href="http://www.antennasystems.com/">http://www.antennasystems.com</a>
<br />>
<br />> GSA Contract Number: GS-35F-0479T
<br />> Electronic Counter Measures, Trap and Trace Devices, and
accessories.
<br />>
<br />> Watch our network broadcast television
interviews on <a href="http://www.youtube.com/antennasystems">www.youtube.com/antennasystems</a>
<br />>
<br />> <b><i>Confidentiality note</i></b><i>:
<br />>
This message is the property of Antenna Systems & Solutions, Inc. and
contains information which may be privileged or confidential. It is
meant only for the intended recipients and/or their authorized agents.
If you believe you have received this message in error, please notify us
immediately by return e-mail and destroy any printed or electronic copies
of this message. Any unauthorized use, dissemination, disclosure, or
copying of this message or the information contained in it, is strictly
prohibited and may be unlawful. Thank you for your
cooperation</i>.</span></font></span></font>
<br />>
<br />> <font size="2" face="Verdana" class="Apple-style-span"><span style="font-size: 10px;" class="Apple-style-span">
<br />> </span></font>
<br class="Apple-interchange-newline" />
<br class="Apple-interchange-newline" />
<br /><b>------- End of Original Message
-------</b>
<br />
</font>
</BODY>
</HTML>