• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 392
  • Last Modified:

DNS Record or Port Mapping?

All,

I have a web server sitting inside of a production network. This web server, tdxs3, has been assigned an external IP address of 96.2.192.139 which DNS should point to it's internal IP address of 172.30.115.246. When trying to hit it from the outside using tdxs3.dsdk12.net, nothing pops up. Hit the IP however, and it works. (Internally, everything works, of course - nothing to resolve) By the way, the switch routes the external IP to the internal IP. So, I think it's port mapped properly. So I'm fairly certain this is a DNS issue. I've changed the DNS record, incremented the SOA serial and restarted named. (FreeBSD box) But even after 24 hours, I'm getting nothing. (I have two DNS zone masters, one for external, the other for internal)

This is the record for external:

tdxs3 IN A 96.2.192.139

tdxs3 IN CNAME tdxs3.dsdk12.net

And internal:

tdxs3 A 172.30.115.246

Am I missing something really obvious here?
0
Jcb1974
Asked:
Jcb1974
1 Solution
 
0xSaPx0Commented:
Easy test. From externally point your DNS to your external dns. If it resolves its a propagation issue, if it does not resolve it is a DNS record issue.

All you need is a DNS A record which I see you have to get resolution working so my guess is that it is a propagation issue.

If you have home based internet as opposed to business its worth calling your ISP to verify they have no problem with you running a DNS server.
0
 
Tim PhillipsWindows Systems AdministratorCommented:
Is there a router between the server and the internet?  If so you need to either forward the ports for web (port 80, 443) or use one-to-one NAT.
0
 
Jcb1974Author Commented:
Yeah, I have a switch between the production web server and the outside. The firewall is actually forwarding traffic to the internal IP with a rule. But it isn't resolving. Mayhaps another 24 hours, if it is a propagation issue?
0
Improve Your Query Performance Tuning

In this FREE six-day email course, you'll learn from Janis Griffin, Database Performance Evangelist. She'll teach 12 steps that you can use to optimize your queries as much as possible and see measurable results in your work. Get started today!

 
0xSaPx0Commented:
If you can get to it via IP, you don't have a problem with firewall rules or NAT/PAT.

This is specifically a DNS issue.
0
 
Jcb1974Author Commented:
That's precisely what I thought. And it appears the A records I have in DNS are formatted correctly, right? So, I presumed it was DNS. I dropped my TTL to 60, and figured I'd wait 24 hours.
0
 
0xSaPx0Commented:
Propagation is generally 1 - 48 hours. So its most likely that. However, if you point directly at the DNS server in your DNS Settings, you should be able to resolve the name (all this is external), if so then its simply a waiting game.
0
 
gheistCommented:
Once cached CNAME takes precedence and brings client resolver into loop.
0
 
Jcb1974Author Commented:
Thanks for the help!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Upgrade your Question Security!

Your question, your audience. Choose who sees your identity—and your question—with question security.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now