SonicWall TZ 200 Rule - Stay INSIDE to get to web/ email

tru504187211
tru504187211 used Ask the Experts™
on
I have a SonicWall TZ 200 and would like to setup a rule that forces all clients on the internal network to instead of going out to the Internet to find the internally hosted web site and email server, to stay inside the network.  How can this be done?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Hello,

I'm not quite clear on your  question, but if I understand correctly, you may be better off doing this with DNS.

Please explain the situation a little further, such as more description on the internal/external web site.

Also, the sonicwall allows you to create a loopback NAT rule. This could redirect traffic going to an exteranl IP and send it to an internal IP.

Author

Commented:
So, if all clients point to a Windows 2003 DC for their DNS, what entries in DNS (and where) would I need to point to their web site, www.domain.com?
Let's say your external web site is www.domain.com, and the Public IP for that is 100.101.102.10, but you have a replica of that web site internally. You would create a DNS zone on your internal DNS for domain.com. Then add an 'A' record for www which points to the internal IP address.

So, when an internal user goes to www.domain.com, the DNS points them to the internal IP (i.e.: 192.168.100.10), instead of sending them to the public IP.

This same approach would apply to mail servers. One thing to keep in mind if you do this would be the need to make sure that all records are covered on the internal domain.com DNS zone. For example, say there was a public server called portal.domain.com, which is only accessible on the outside. You would have to account for that DNS record on the internal zone as well.

Author

Commented:
Thank you...I this will be done Saturday evening (tomorrow), so I'll post back stating whether it worked or if I need more clarification.

Author

Commented:
Solution works! THANKS!

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial