[BlueOnyx:05989] Re: 1:1 NAT and DNS - Domains not resolving regularly

[Jeff Folk]

On Dec 2, 2010, at 9:41 AM, Titus Bolton wrote:

> Greetings and Salutations:
> 
> I have an issue with domain names not resolving, and I am pretty sure it has something to do with our NAT'ing and our DNS, though I cannot be positive.
> 
> We host a large number of domains, and we have noticed that the domains are not resolving properly outside of the local network.  Two of the domains are comsiteconstruction.com and radiotowerinstallers.com.

When I do a host lookup for those domains, I receive a non-routable IP address:

Jeffrey-Folks-iMac:~ jfolk$ host radiotowerinstallers.com
radiotowerinstallers.com has address 10.0.0.200
Jeffrey-Folks-iMac:~ jfolk$ host comsiteconstruction.com
comsiteconstruction.com has address 10.0.0.140
comsiteconstruction.com mail is handled by 20 mail.comsiteconstruction.com.

Your DNS should return a public IP pointing to whatever device is doing the forwarding. If you need to have access to the public AND private IPs based on DNS, you'll have to configure BIND with inside and outside zones for the domains.

HTH;
Jeff

> 
> When I ping them I get something to the extent of:
> 
> ping radiotowerinstallers.com
> PING radiotowerinstallers.com (10.0.0.200): 56 data bytes
> 64 bytes from 10.0.0.200: icmp_seq=0 ttl=64 time=50.060 ms
> 
> ping comsiteconstruction.com
> PING comsiteconstruction.com (10.0.0.140): 56 data bytes
> 64 bytes from 10.0.0.140: icmp_seq=0 ttl=64 time=40.006 ms
> 
> Pings from outside our network
> http://network-tools.com/default.asp?prog=ping&host=comsiteconstruction.com
> 
> Ping 216.132.149.141
> 
> [comsiteconstruction.com]
> 
> Round trip time to 216.132.149.141: 417 ms
> Round trip time to 216.132.149.141: 529 ms
> Round trip time to 216.132.149.141: 723 ms
> Timed out
> Timed out
> Timed out
> Round trip time to 216.132.149.141: 501 ms
> Timed out
> Round trip time to 216.132.149.141: 508 ms
> Round trip time to 216.132.149.141: 173 ms
> 
> Average time over 10 pings: 285.1 ms
> 
> http://network-tools.com/default.asp?prog=ping&host=radiotowerinstallers.com
> 
> Ping
> 
> [radiotowerinstallers.com]
> 
> Bad destination
> Bad destination
> Bad destination
> Bad destination
> Bad destination
> Bad destination
> Bad destination
> Bad destination
> Bad destination
> Bad destination
> 
> Average time over 10 pings: 0 ms
> 
> 
> We're using a Cisco 3700 with a 1:1NAT.  The webservers are configured with the internal IPs.
> 
> Here's a link that gives some more information regarding our DNS issues:
> http://www.dnsstuff.com/tools/dnsreport?domain=comsiteconstruction.com&format=raw&loadresults=true&token=2631b81c48a7cd4d17c01c08180f2013
> 
> Please let me know if I can give any more information.