I have a typical setup with an ASA5520 inside, outside and dmz.
I have a server in the dmz 192.168.90.4 255.255.255.0 which has dns enabled
My inside network is 192.168.200.0/24
I have a static map for an outside ip i'll call it 188.8.131.52 to 192.168.90.4
I have all my nat and access lists setup for basic access as per the cisco guides so I can.
1. do a dns request from the inside network to the dmz 192.168.90.4 address and get a response
2. do a dns request from the internet to the 184.108.40.206 address and get a response
What I can't do is do a dns request from the inside to the 220.127.116.11 address. I see a lot of people talking about using dns rewrite to fix this, but that wouldn't work if you use the ip address like if you issue the command 'host www.google.com
18.104.22.168' from an inside linux computer. we actually run both internal and external dns servers so I can function like this but I was just wondering if there was a way to make this work. I thought I came across a document once that told how to do this with another nat command but I can't seem to find it again.