Posted on 2006-06-08
Last Modified: 2010-04-18
I have an internal domain set to empl.local and our external is

We have a proxy server set up at that I can access fine externally, but not internally.  

External dns points the to the external address of our firewall (x.x.x.202), which then port forwards it inside to the proxy server (y.y.y.107).  

When I do an nslookup on internally, it returns the x.x.x.202 address
and nslookup on ezproxy.empl.local returns the y.y.y.107 address

We have a website at x.x.x.203, that internally resolves to the server y.y.y.3, but I didnt set it up and I dont know where to look to see how it is setup so I can take the same approach for the proxy.

I want the nslookup on to internally point to y.y.y.107.

I am running win2003.
Question by:jmcnear
    LVL 33

    Accepted Solution

    Create a new Forward lookup zone on your internal Windows 2003 DNS server.  Zone name should be "".  Then create an 'A' record in this zone called "ezproxy" assign an IP address of y.y.y.107


    Author Comment

    ok, fair enough.  Now nslookup reports back y.y.y.107, but when I enter into my web browser, I cant get the page?!?

    any ideas?

    LVL 33

    Expert Comment

    what happens when you just type the IP in the browser?    

    Not sure....but if there is redirection you will have to have resolution to all other names for the domain on your local DNS server.  Once you create the forward lookup zone, you because authoritative for this domain...and forwarding to the internet for will no longer take place.

    I was just trying to solve your NSLOOKUP problem....which seems to be solved.  Another way to solve this is to add host files to each machine just to resolve to y.y.y.107   but this is a more difficult solution.
    LVL 23

    Expert Comment

    When you say "proxy" do you mean an IE web proxy?  What kind?  Why is it accessible externally?

    A web proxy should be internal only and you shouldn't be able to "get to it" from external.

    Unless you mean VPN?


    Author Comment

    TheCleaner: It is a server on my local network that will authenticate outside users and then allow them access to a slew of registered databases as if they were accessing from my local network.


    Author Comment

    NJ: I get nothing when I enter the local ip address into my web browser.

    I have 84 machines, so I dont really want to go the hosts route.

    PS. You did solve my nslookup problem, so the points are yours


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive + Dolby Voice = No More Audio Complaints!

    Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

    Learn about cloud computing and its benefits for small business owners.
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now