Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm new in this forum and ... first thing first.. sorry for my english

i need a little help configuring BIND9 on Ubuntu server 12.04.2

The situation is the following.

=> LINUX SERVER => linux ubuntu 12.04.2 With BIND9, iptables and two eth: eth0 to the wan (PUBLIC STATIC IP from ISP) and eth1 on the local LAN (

=> WEB SERVER => ubuntu 12.04.2 linux apache, mysql and eth0 on the local LAN ( where resides the crm

=> MAIL SERVER => linux ubuntu 12.04.2 with postfix - dovecot etc etc and eth0 on the local LAN ( where lies the webmail

We have a domain name NOMEAZIENDA.COM managed externally with a public registrar (register) only for DNS management. The site, which responds to, resides in a webfarm, and for this there are no problems

But we have some web applications (webmail, CRM, workflow, ...) that are hosted on our servers in LAN, and for which we now need to make them accessible from the wan. And here I problems arise.

As I understand, if I create a zone master (authoritative) in BIND9 for NOMEAZIENDA.COM, all of the local lan pc would not be able to reach the site, unless I create a Record within of my DNS. This solution would avoid it because I duplicate a lot of routes ...

I then decided to create a master zone NOMEAZIENDA.LOCAL in my DNS. Internally everything works perfectly. By all client applications are reachable.

What I miss to understand is:

I set a record CRM.NOMEAZIENDA.COM in external registrar with a A RECORD (e.g. CRM.NOMEAZIENDA.COM A MY_PUBLIC_STATIC_IP_ADDRESS) to my server where BIND9 resides.

Now.. What i would like to do is:

when i write (from a browser in a computer outside my LAN) i must view the crm at crm.nomeazienda.local hosted in a server in my lan.

It's possible?

Thank's in advance to all...

share|improve this question

closed as unclear what you're asking by Falcon Momot, Ward, mdpc, dawud, MadHatter Sep 16 '13 at 7:47

Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question.If this question can be reworded to fit the rules in the help center, please edit the question.

This is really unclear to me. BIND has (almost) nothing to do with 'getting' somewhere. BIND is more of an address book, not the mailman. Can you clarify what you mean by 'point to my server'? What type of record did you create for CRM.NOMEAZIENDA.COM? A, CNAME, NS? – yoonix Sep 13 '13 at 20:07
@yoonix => I edit my question to explain better the situation. Sorry if previous was'nt clear. In my public registrar I set a A RECORD for to my public_static_ip_address server. – Giacall99 Sep 16 '13 at 8:41
Do you control the WAN, and the routing arrangements for machines within the WAN, or not? – MadHatter Sep 16 '13 at 9:10
I think maybe what you're looking for is split-horizon DNS? – Falcon Momot Sep 16 '13 at 10:03
@Falcon Momot => Hi. You means i must create 2 view in BIND? 1 for internal lan and 1 for external? – Giacall99 Sep 16 '13 at 12:11

If I understand correctly, you want to route traffic from an internet accessible server to a server on a private network.

You would not use bind to do this. You need to either:

a) get public IP addresses for your servers and set up a dns entry for each address. (Note: this could be dangerous for you if you don't have security measures in place).

b) set up a proxy on your world facing server to forward traffic to to the server on your private network.

For more specifics, I would have to know more about your setup to comfortably make recommendations.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.