DNS behind a firewall

[jkint]

I've successfully setup BIND in the past as a primary server for a domain.. I've got no problems with that part. the Name server was connected direct to a real world IP.

finally got my firewall/NAT box setup, this evening. the only question I have is...

when running a primary master DNS server from a NAT'd network with other services running behind the firewall, do the records point to the external IP or the internal IP's?

just a quick description of the network:

cable modem
|
| x.x.x.x
|
firewall----------DMZ 192.168.2.0/24
|
|
|
internal network 192.168.1.0/24

the firewall is running a stripped install of slack with IPtables

in the DMZ, I have one box that is running httpd, mysql, and BIND

thanks

-jon

[fatpelt]

if you want hosts outside the nat to see the services offered inside the nat you must point to the outside addresses..


also you must forward all requests hitting the nat box inside to the services that are natted..

make sense?

pat

[jkint]

I've already got all the services forwarded.. it was just the NAT'd addies that had me confused. thanks for the reply! I'll post again when I'm done and let you know how it goes.

-jon