The ultimate fix for this is to move to IPv6 so every device is universally addressable. NAT is a stop gap measure that is well past its use by date.
> On 22 Apr 2020, at 09:03, Mark Andrews <ma...@isc.org> wrote: > > https://www.networkstraining.com/dns-doctoring-cisco-asa/ > >> On 18 Apr 2020, at 06:26, John Wiles <j...@iotis.org> wrote: >> >> Hello all, >> >> I am running into a problem that I think is caused by either a >> misconfiguration in Bind9, our Cisco NAT, or perhaps both. >> >> The scenario: >> >> We host our own sites locally, including internal and external DNS. The >> external dns servers are delegated for reverse lookups. The NAT is a static >> one. >> >> When I am on our internal network, I am able to query both servers and get >> the appropriate external ip address. However, when I try to do the same >> thing externally I get “Question section mismatch: got >> 6.1.1.10.in-addr.arpa/PTR/IN.” >> >> Some online tools will resolve the public ip to the appropriate hostname, >> but they will also show the ip as 10.1.1.6. Normally this wouldn’t be an >> issue except that I think it is the reason for some emails not being >> delivered. >> >> Any help or guidance is greatly appreciated. >> >> John >> _______________________________________________ >> Please visit https://lists.isc.org/mailman/listinfo/bind-users to >> unsubscribe from this list >> >> bind-users mailing list >> bind-users@lists.isc.org >> https://lists.isc.org/mailman/listinfo/bind-users > > -- > Mark Andrews, ISC > 1 Seymour St., Dundas Valley, NSW 2117, Australia > PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org > > _______________________________________________ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
