• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 638
  • Last Modified:

Resolving mail server host name with FQDN inside the network

Hi,

I have a linux based mail server with host name "mail.abc.com" which can be reached when tried from out side the network. But When trying inside the network, where the email server is located.. unable to reach through "mail.abc.com"  but it can be reached by it's local ip address "192.168.100.30"
 
I would like to resolve the host name inside the network also...  how to achieve this...?

Email server: Zimbra behind the untangle firewall...
0
kennynt
Asked:
kennynt
1 Solution
 
TazDevil1674Commented:
What are you using as your DNS Server?  You need to add an A-Record to reflect the Internal IP within your network

A vast majority of Routers/Firewalls can't cope with an external IP that comes back through to the network it originated from; hence setting up an A-Record within your internal recor pointing to the internal IP.
0
 
Sushil SonawaneCommented:
If you using same domain name for internal network then add your mail server host "mail" entry in your internal dns server.

OR

If you using different name then create a zone abc.com then add your mail server host "mail" entry point to your internal mail server name entry in your internal dns server.
0
 
Jan SpringerCommented:
I would recommend using views.  The internal view can give one IP while the external, the other.
0
Veeam and MySQL: How to Perform Backup & Recovery

MySQL and the MariaDB variant are among the most used databases in Linux environments, and many critical applications support their data on them. Watch this recorded webinar to find out how Veeam Backup & Replication allows you to get consistent backups of MySQL databases.

 
Jan SpringerCommented:
Sorry -- views within DNS.
0
 
MCode151Commented:
DNS views are pretty easy.
Further tricks zimbra side to help it along http://wiki.zimbra.com/wiki/Split_DNS


Bind example:

acl "trusted" {
        192.168.1.0/24;                         # network address of your local LAN
        127.0.0.1;                              # allow loop back
        localnets;
view "internal" {

        match-clients { trusted; };             # match hosts in acl "trusted" above
        allow-query { any; };                   # allow anyone to issue queries
        recursion yes;                          # allow recursive queries
        notify no;                              # disable AA notifies
        additional-from-auth yes;
        additional-from-cache yes;

        zone "." {
                type hint;
                file "data/static/named.ca";
        };

        zone "localhost" {
                type master;
                file "data/static/localhost.zone";
        };

        zone "127.in-addr.arpa" {
                type master;
                file "data/static/127.zone";
        };

        zone "1.168.192.in-addr.arpa" {
                type master;
                file "data/internal/1.168.192.zone";
        };

        zone "XXXXXXXXXX.XXX" {
                type master;
                file "data/internal/XXXXXXXXXX.XXX.zone";
        };

};view "external" {

        match-clients { any; };
        recursion no;
        allow-transfer { dns_slaves; };
        additional-from-auth no;
        additional-from-cache no;

        zone "." in {
                type hint;
                file "data/static/named.ca";
        };

        zone "XXXXXXXXXX.XXX" {
                type master;
                file "data/external/XXXXXXXXXX.XXX.zone";
                allow-query { any; };
        };

};
0
 
kennyntAuthor Commented:
Hi,

I have the DNS management all with Godaddy.. But in the local network we are using a windows 2008 R2 DC as a internal DNS server... and the internal domain is like abc.local. So should i add abc.com as the secondary domain the in the local DC...? and a Host record for the email server...?
0
 
Jan SpringerCommented:
Then you need to find out if your firewall can do "dns doctoring".
0
 
kennyntAuthor Commented:
Hi

I'm using linux based firewall "Untangle"  but I don't know whether it has that feature...
0

Featured Post

New feature and membership benefit!

New feature! Upgrade and increase expert visibility of your issues with Priority Questions.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now