If you are natting and port forwarding then it is correct to use the private ip
in the nsd.conf, of course any entries in zone files which refer to the server
would use the public address.
Brett
--
Brett Carr
Manager DNS Engineering
Nominet UK
From: nsd-users <nsd-users-bounces at lists.nlnetlabs.nl> on behalf of
Mukul Shukla via nsd-users <nsd-users at lists.nlnetlabs.nl>
Date: Wednesday, 22 June 2022 at 09:14
To: nsd-users at lists.nlnetlabs.nl <nsd-users at lists.nlnetlabs.nl>
Subject: Re: [nsd-users] NSD name server behind Firewall
Dear Kaulkwappe,
Thanks for the prompt reply.
I have NATed and port forwarded to my internal name server.
The problem is when I use public IP on my internal name server (in
/etc/nsd/nsd.conf) as ip-address, it gives me an error when I check with
nsd-checkconf. But when I use its own IP address (private) it gives me no error.
I also want to make Reverse DNS entries for my email server, so I want to know
the correct method of configuring NSD behind a NATed firewall.
Thanks.
Mukul
On Wed, Jun 22, 2022 at 1:05 PM Kaulkwappe via nsd-users <nsd-users at
lists.nlnetlabs.nl<mailto:nsd-users at lists.nlnetlabs.nl>> wrote:
Dear Mukul,
you would still use the public IP address if the server potentially shall be
available world-wide.
Kind Regards,
Kaulkwappe
----------------------------------------------------------------
From: Mukul Shukla via nsd-users <nsd-users at
lists.nlnetlabs.nl<mailto:nsd-users at lists.nlnetlabs.nl>>
Sent: Wednesday, 22. Jun 2022 ? 09:06 CEST +0200
To: nsd-users at lists.nlnetlabs.nl<mailto:nsd-users at
lists.nlnetlabs.nl>
Subject: [nsd-users] NSD name server behind Firewall
Dear All,
I have recently started to use NSD as my name server. The NSD server (private IP
192.168.110.14), is behind a firewall (with the public IP 14.139.250.83).
I am confused as to what I should set for the "ip-address" in
/etc/nsd.conf?
Thanks.
Mukul
_______________________________________________
nsd-users mailing list
nsd-users at lists.nlnetlabs.nl<mailto:nsd-users at lists.nlnetlabs.nl>
https://lists.nlnetlabs.nl/mailman/listinfo/nsd-users<https://secure-web.cisco.com/1cDYCZ7f3G43NTpqVjuiMkDQoHAgMHkLXzb_jjzwrikzLiXeg_S5BmU9Aj26SJnlJThhQOKO840ZB3TdHEazsWWAMouDnGCJzG4LUmdKzGWiI2HiT3ZabiebeCCNZzgb62E8nBZR8j7_7zB7h8xoXJarUFsHVtViJhGZLU5TMFfTFeeZxJwy-NzJq0PNIVWwq6zKNFpEZr-S-oVMuR2f32ZvslMqVkQxhNEqZ899PKXei8ldFvKZCYPt8qJ2_nTVOamZW28Ozk3nxa40ZAkhsyqDQJA9juRMQ2QDsCj_FxPk/https%3A%2F%2Flists.nlnetlabs.nl%2Fmailman%2Flistinfo%2Fnsd-users>
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.nlnetlabs.nl/pipermail/nsd-users/attachments/20220622/d6d946cb/attachment-0001.htm>