Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
New Member

DNS Rewrite and Zone Transfer

I have a NAT address that I would like to apply DNS rewrite to. For example, on the inside interface is accessed by going to when on the outside interface. If I have a DNS server on the network on the inside and query the DNS name from the outside the DNS response will get translated from to by my PIX with sw version 6.3. However, it appears that when my offsite DNS replication partner does a Zone Transfer, the translation does not happen, and ends up pointing to on my offsite DNS server which is not a reachable address. I can't just turn off DNS Rewrite because I need inside users and outside users to use the same DNS name but receive different IP resolved addresses depending on whether they are inside or outside when they make the query. Is this possible? Am I wrong in thinking Zone Transfers are bypassing the DNS rewrite? Thank you!

Cisco Employee

Re: DNS Rewrite and Zone Transfer

Zone transfers are not included in the DNS rewreite feature either by using the alias command or the dns option on the static command. You'd have to do some sort of destination NAT on your off-site users (or whoever uses your off-site DNS server) and NAT any packets destined to and actually send them to Of course if all these users are in different locations this'll get messy, but the PIX is not going to rewrite the zone transfer traffic, sorry.

CreatePlease to create content