PIX 506E Need help using alias command to access internal machines by external IP
Posted on 2004-10-08
I've got a PIX 506E and I have a situation where I think I need to use the alias command to make it work but I'm not sure.
My situation is as follows:
I have a web server behind the PIX that hosts web sites for various clients outside the firewall. For those clients whose DNS namespace I control I simply add the hosts for that domain to my internal DNS servers and point it to the private IP of the web server and on the external DNS server add hosts that point to the public IP for external users to get. That works great. The problem I run in to is when I don't control the DNS namespace, but the 3rd party DNS servers point to the public IP of my web server and I try to get to the site from behind the PIX. The site never loads because it's trying to get to the public IP and the message I'm getting from reading other posts is that when you're behind the PIX you can't get to the public IPs used in your static translations.
I looked at the alias command thinking that would solve my problem but when I implemented the alias command it still didn't work. I've tried pinging the host on the 3rd party DNS server from behind the PIX and it shoots back the public IP of my web server but never responds to the ping. I've also tried getting to the site through a web browser in case some ICMP block was going on but still no look.
Is the alias the right command to use so I can get to my web server from behind the PIX using its public IP?
Thanks for any help and hpoefully this makes sense.