Re: How to NAT to enable access to WEB server in DMZ from LAN

From: Christian Zeng (christian@zengl.net)
Date: Wed Jun 25 2008 - 10:52:03 ART


Hi,

* Mathew <mathewfer@gmail.com> wrote:
>
>In essence, the clients Web server which is in the DMZ zone can be
>accessed from Internet via it's public URL. Users in the LAN also need
>to access the website using the same public URL.
>Web server also provides access to Intranet web page via it's private
>IP address. (Eg: http://10.0.0.2)
>
>Access from outside is fine eg http://68.106.30.181
>Access to Intranet from inside is fine http://10.0.0.2
>Access to Web server from inside via public URL does not work
>http://68.106.30.181

NVI offers such functionality, for example

http://www.internetworkpro.org/wiki/NAT:_access_outside_global_address_from_the_inside

On the other hand, split dns seems a much cleaner way of satisfying such
a requirement.

Christian



This archive was generated by hypermail 2.1.4 : Tue Jul 01 2008 - 06:23:23 ART