Machines in the outside world, can view = my websites=20 fine, but whenever I try to go to one of them from a machine on my = internal=20 network behind the firewall, neither the domain name nor the IP will=20 resolve. I also have the same problem with my mail server and have = to use=20 the internal address of the mail server. I am going to guess that = the best=20 solution to this is to run some kind of local DNS server on the inside = of the=20 firewall which resolves all my sites internally, but since I don't have = a server=20 at my disposal for it, is there some way around this? I had the=20 POSTROUTING MASQ line on and that did allow the internal machines to = resolve,=20 but it also hid the originating address for any outside machine, thus = creating a=20 security disaster.

-michael

*nat
:PREROUTING ACCEPT=20 [241:88600]
:POSTROUTING ACCEPT [0:9862]
:OUTPUT ACCEPT = [68:4275]
-A=20 PREROUTING -d 10.10.10.252 -p tcp -m tcp --dport 110 -j DNAT = --to-destination=20 192.168.77.2
-A PREROUTING -d 10.10.10.252 -p tcp -m tcp --dport 25 = -j DNAT=20 --to-destination 192.168.77.2
-A PREROUTING -d 10.10.10.251 -p tcp -m = tcp=20 --dport 80 -j DNAT --to-destination 192.168.77.2
-A PREROUTING -d=20 10.10.10.250 -p tcp -m tcp --dport 80 -j DNAT --to-destination=20 192.168.77.2
-A PREROUTING -d 10.10.10.250 -p tcp -m tcp --dport 22 = -j DNAT=20 --to-destination 192.168.77.2
-A POSTROUTING -o eth0 -j SNAT = --to-source=20 10.10.10.254
#-A POSTROUTING -o eth1 -j = MASQUERADE
COMMIT

*mangle
:PREROUTING ACCEPT=20 [18365:3221456]
:INPUT ACCEPT [10886:760348]
:FORWARD ACCEPT=20 [7269:2438049]
:OUTPUT ACCEPT [8009:752540]
:POSTROUTING ACCEPT=20 [15177:3182145]
COMMIT

*filter
:INPUT ACCEPT = [0:229546]
:FORWARD=20 ACCEPT [363:1553786]
:OUTPUT ACCEPT [2:619341]
-A INPUT -p udp -m = udp=20 --sport 500 --dport 500 -j ACCEPT
-A INPUT -p tcp -j ACCEPT
-A = INPUT -p=20 esp -j ACCEPT
-A INPUT -p ah -j ACCEPT
-A INPUT -i lo -j = ACCEPT
-A=20 FORWARD -i eth1 -j ACCEPT
-A FORWARD -i eth0 -o eth1 -p tcp -m tcp = --dport=20 110 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i = eth0 -o=20 eth1 -p tcp -m tcp --dport 25 -m state --state NEW,RELATED,ESTABLISHED = -j=20 ACCEPT
-A FORWARD -i eth0 -o eth1 -p tcp -m tcp --dport 80 -m state = --state=20 NEW,RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eth0 -o eth1 -p tcp = -m tcp=20 --dport 22 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A = OUTPUT -p=20 udp -m udp --sport 500 --dport 500 -j ACCEPT
-A OUTPUT -p tcp -j = ACCEPT
-A=20 OUTPUT -p esp -j ACCEPT
-A OUTPUT -p ah -j ACCEPT
-A OUTPUT -o lo = -j=20 ACCEPT
COMMIT