Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This image contains the topology I want to make work.

I have a linux server that is used for hosting websites and also routing for our internal network. How can I access the internal server that hosts the team foundation server from outside from a domain like

The parent domain is hosted on the linux machine, is there a way to NAT the dns queries to the windows server?

                                               |LINUX SERVER|
 Windows Server(   _______|_________SWITCH Internal Network
share|improve this question
You can't NAT DNS queries. Unfortunately I'm not sure I understand your question very well. – Frands Hansen Sep 23 '12 at 23:31
Accessing a Website via HTTP protocol and DNS resolution are two separate concerns. First decide on which external Socket (IP + TCP Port) the teamfoundation website should be available and how to traverse the NAT. Then decide the external hostname. Please clarify your question. – Roman Sep 24 '12 at 0:03
Thankyou very much for the reply..... ok i will point out the things it might be confusing. From what i understand from Thomas i must nat my internal server to externalip:portNumber, and then make my dns entries to that Ip. Thanks Thomas i think i have the problem almoust solved. – Mihai Sep 26 '12 at 13:35
@Mihai It seems you are on the right path. I think you should then write your insights in the question as well so that it can be helpful for others, too. I guess you can write your own answer now? If not, let us know :) – Roman Oct 11 '12 at 15:26

To clarify: You're trying to hit an internal website from outside the network.

The DNS for the domain needs to be publicly resolvable to the outside IP that you want to use. Then you NAT that IP at the external device to your internal IP.

For Example if you have a Class C IP Block (1.1.1.x), and you choose to use for your site, while the internal IP is

In this case you set up with an A Record on your nameserver that points to Then in your external facing device you NAT to

Depending on what the site is you may have security concerns such as only allowing by certain IP ranges, requiring a password to access the site, etc. but that's a separate point.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.