next »

[~gr3p~]

I have a 2 servers.

Server A is Windows 2000 Server acting as Domain Controller with IP 192.168.1.97

Server B is Fedora Core 3 acting as a:
i)  Squid Proxy Server with 2 NIC. One NIC has a public IP connected to ISP router and the other has a private IP 192.168.1.1 connected to internal LAN.
ii) Caching DNS server with /etc/resolv.conf pointing to 2 ISP DNS server public IP's

All my 40 clients are Windows 2000 professional and they use M$ Outlook as a mail client which downloads emails from ISP hosted mail server with POP: mailx.compnay.com and SMTP: smtp.ispname.com

clients access internet using Squid proxy server @ 192.168.1.1

They face problem connecting to the ISP mail server coz M$ outlook doesn't have an option to configure proxy settings neither it uses the proxy settings of Internet Explorer.

To solve this problem I added IP MASQUERADE rules on 192.168.1.1 and configured default gateway of clients to 192.168.1.1.

The primary DNS IP on all clients is 192.168.1.97 and Secondary has to be configured to 192.168.1.1 for Mail client to do forward lookup.

Now problem arises when my clients users try to access a service on our other internal production servers from Internet explorer
For example:

Server hostname: srv02 & IP: 192.168.1.3

When they type http://srv02 in IE it strangely resolves to a public IP address  :?: instead of 192.168.1.3

I do nslookup srv02 and it perfectly resolves to corect ip address but why not in IE.

If i emove Secondary DNS ip i.e 192.168.1.1 and it works without problems but then Mail clients fail.

The temporary solution is to Map all the production server hostname to IP in hosts file and copy it to all clients  :roll:

What is going wrong. Or shall i try configuring WINS on 192.168.1.97 or a staic DNS server on 192.168.1.1

Somewhere my DNs concept is flawed plz correct me

TIA

[aktiwari4u]

as you discribed it is showing that its trying to pass every connection to the internet i think its batter to comfigure your proxy as transperent proxy rather then IP MASQUERADing.i suppose that it may solve your problem.
beside it i think you should also bind your both ips for to that name in your DNS .

   Recommend LS
   Linux User Around