Subj : Re: CVS commit web/html/i
To   : Angus Mcleod
From : Belly
Date : Fri Apr 08 2005 12:36 am

  Re: Re: CVS commit web/html/i
  By: Angus Mcleod to Runemaster on Thu Apr 07 2005 11:02 pm

 > However, someone on the *inside* of the NAT box, example on BrowserPC, 
 > doesn't need to use NAT at all.  What they want is for DNS to resolve the 
 > webserver as 192.168.1.100 so it can be accessed directly.  If your NAT 
 > box has a third interface to a DMZ with the webserver there, then the 
 > problem is slightly different but not much.

Yes. I often use a 'fake' internal DNS zone to handle that. On a DMZ, a
properly crafted prerouting chain can take care of that without any DNS
tomfoolery. (are they even called 'chains' anymore? 'Table' just doesn't sound
right.)

     o
    (O) 
   BeLLy


---
 þ Synchronet þ **** BraziBBS: bbs.brazi.net ****

.