[nsd-users] NSD name server behind Firewall

[Brett Carr]

If you are natting and port forwarding then it is correct to use the private ip in the nsd.conf, of course any entries in zone files which refer to the server would use the public address.

Brett

--
Brett Carr
Manager DNS Engineering
Nominet UK


From: nsd-users <nsd-users-bounces at lists.nlnetlabs.nl> on behalf of Mukul Shukla via nsd-users <nsd-users at lists.nlnetlabs.nl>
Date: Wednesday, 22 June 2022 at 09:14
To: nsd-users at lists.nlnetlabs.nl <nsd-users at lists.nlnetlabs.nl>
Subject: Re: [nsd-users] NSD name server behind Firewall
Dear Kaulkwappe,

Thanks for the prompt reply.

I have NATed and port forwarded  to my internal name server.

The problem is when I use public IP on my internal name server (in /etc/nsd/nsd.conf) as ip-address, it gives me an error when I check with nsd-checkconf. But when I use its own IP address (private) it gives me no error.

I also want to make Reverse DNS entries for my email server, so I want to know the correct method of configuring NSD behind a NATed firewall.

Thanks.

Mukul


On Wed, Jun 22, 2022 at 1:05 PM Kaulkwappe via nsd-users <nsd-users at lists.nlnetlabs.nl<mailto:nsd-users at lists.nlnetlabs.nl>> wrote:
Dear Mukul,

you would still use the public IP address if the server potentially shall be available world-wide.

Kind Regards,
Kaulkwappe

----------------------------------------------------------------
From: Mukul Shukla via nsd-users <nsd-users at lists.nlnetlabs.nl<mailto:nsd-users at lists.nlnetlabs.nl>>
Sent: Wednesday, 22. Jun 2022 – 09:06  CEST +0200
To: nsd-users at lists.nlnetlabs.nl<mailto:nsd-users at lists.nlnetlabs.nl>

Subject: [nsd-users] NSD name server behind Firewall

Dear All,

I have recently started to use NSD as my name server. The NSD server (private IP 192.168.110.14), is behind a firewall (with the public IP 14.139.250.83).

I am confused as to what I should set for the "ip-address"  in /etc/nsd.conf?

Thanks.

Mukul

_______________________________________________
nsd-users mailing list
nsd-users at lists.nlnetlabs.nl<mailto:nsd-users at lists.nlnetlabs.nl>
https://lists.nlnetlabs.nl/mailman/listinfo/nsd-users<https://secure-web.cisco.com/1cDYCZ7f3G43NTpqVjuiMkDQoHAgMHkLXzb_jjzwrikzLiXeg_S5BmU9Aj26SJnlJThhQOKO840ZB3TdHEazsWWAMouDnGCJzG4LUmdKzGWiI2HiT3ZabiebeCCNZzgb62E8nBZR8j7_7zB7h8xoXJarUFsHVtViJhGZLU5TMFfTFeeZxJwy-NzJq0PNIVWwq6zKNFpEZr-S-oVMuR2f32ZvslMqVkQxhNEqZ899PKXei8ldFvKZCYPt8qJ2_nTVOamZW28Ozk3nxa40ZAkhsyqDQJA9juRMQ2QDsCj_FxPk/https%3A%2F%2Flists.nlnetlabs.nl%2Fmailman%2Flistinfo%2Fnsd-users>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20220622/d6d946cb/attachment-0001.htm>