Configure dnsmasq as stand-in for NAT hairpinning Unicorn Meta Zoo #1: Why another podcast? ...

PIC mathematical operations weird problem

How to count in linear time worst-case?

What is /etc/mtab in Linux?

Check if a string is entirely made of the same substring

Does Feeblemind produce an ongoing magical effect that can be dispelled?

What to do with someone that cheated their way through university and a PhD program?

std::is_constructible on incomplete types

Passing args from the bash script to the function in the script

Would reducing the reference voltage of an ADC have any effect on accuracy?

All ASCII characters with a given bit count

Why did Israel vote against lifting the American embargo on Cuba?

What was Apollo 13's "Little Jolt" after MECO?

Did the Roman Empire have penal colonies?

What do you call the part of a novel that is not dialog?

What is the least dense liquid under normal conditions?

How to use @AuraEnabled base class method in Lightning Component?

Multiple options vs single option UI

What is the best way to deal with NPC-NPC combat?

How can I wire a 9-position switch so that each position turns on one more LED than the one before?

Are these square matrices always diagonalisable?

Multiple fireplaces in an apartment building?

Can you stand up from being prone using Skirmisher outside of your turn?

Map material from china not allowed to leave the country

Does Mathematica have an implementation of the Poisson Binomial Distribution?



Configure dnsmasq as stand-in for NAT hairpinning



Unicorn Meta Zoo #1: Why another podcast?
Announcing the arrival of Valued Associate #679: Cesar Manara
Come Celebrate our 10 Year Anniversary!





.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}







0















I have a home server hosting a small website that I want to be able to access by name from within my LAN. Outside the LAN everything works fine, but my router does not support NAT hairpinning and, seemingly as a result, I cannot resolve my domain name from inside the LAN. I am trying to set up dnsmasq to resolve my domain to its local IP, and forward all other requests to, say 8.8.8.8.



My system is as follows:




  1. A wireless router at 192.168.2.1

  2. A webserver at 192.168.2.100


  3. dnsmasq running on the webserver box with the following settings: lines conf-dir=/etc/dnsmasq.d,.bak and conf-dir=/etc/dnsmasq.d,.bak uncommented in dnsmasq.conf and the additional settings



    domain-needed

    bogus-priv

    listen-address=``127.0.0.1

    listen-address=``192.168.1.42

    domain=mywebsite.com

    expand-hosts

    local=/mywebsite.com/

    no-dhcp-interface=enp2s0f0

    no-resolv

    no-poll

    server=8.8.8.8

    server=8.8.4.4



in a file in dnsmasq.d.





  1. /etc/hosts in my server looks like



    127.0.0.1 localhost



    192.168.2.100 MyServerName mydomain.tld



    The following lines are desirable for IPv6 capable hosts
    ::1 localhost ip6-localhost ip6-loopback
    ff02::1 ip6-allnodes
    ff02::2 ip6-allrouters



  2. The router configured to use 192.168.2.100 as primary and secondary DNS.


  3. Port 53 ALLOW in ufw rules on webserver.


My webserver can ping itself using ping mydomain.tld and nslookup mydomain.tld shows it's resolving correctly to 192.168.2.100. But nslookup from any other machine on the network gives back the external IP of my website, and no other machine can ping my webserver at mydomain.tld from insider the LAN.



I feel my setup is close in principle but that either I'm missing something obvious, or something needs to be restarted or reloaded in order to get things working. I have tried flushing the dns cache of another machine on the LAN, and still nothing. Suggestions?









share







New contributor




Stefan Dawydiak is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.



























    0















    I have a home server hosting a small website that I want to be able to access by name from within my LAN. Outside the LAN everything works fine, but my router does not support NAT hairpinning and, seemingly as a result, I cannot resolve my domain name from inside the LAN. I am trying to set up dnsmasq to resolve my domain to its local IP, and forward all other requests to, say 8.8.8.8.



    My system is as follows:




    1. A wireless router at 192.168.2.1

    2. A webserver at 192.168.2.100


    3. dnsmasq running on the webserver box with the following settings: lines conf-dir=/etc/dnsmasq.d,.bak and conf-dir=/etc/dnsmasq.d,.bak uncommented in dnsmasq.conf and the additional settings



      domain-needed

      bogus-priv

      listen-address=``127.0.0.1

      listen-address=``192.168.1.42

      domain=mywebsite.com

      expand-hosts

      local=/mywebsite.com/

      no-dhcp-interface=enp2s0f0

      no-resolv

      no-poll

      server=8.8.8.8

      server=8.8.4.4



    in a file in dnsmasq.d.





    1. /etc/hosts in my server looks like



      127.0.0.1 localhost



      192.168.2.100 MyServerName mydomain.tld



      The following lines are desirable for IPv6 capable hosts
      ::1 localhost ip6-localhost ip6-loopback
      ff02::1 ip6-allnodes
      ff02::2 ip6-allrouters



    2. The router configured to use 192.168.2.100 as primary and secondary DNS.


    3. Port 53 ALLOW in ufw rules on webserver.


    My webserver can ping itself using ping mydomain.tld and nslookup mydomain.tld shows it's resolving correctly to 192.168.2.100. But nslookup from any other machine on the network gives back the external IP of my website, and no other machine can ping my webserver at mydomain.tld from insider the LAN.



    I feel my setup is close in principle but that either I'm missing something obvious, or something needs to be restarted or reloaded in order to get things working. I have tried flushing the dns cache of another machine on the LAN, and still nothing. Suggestions?









    share







    New contributor




    Stefan Dawydiak is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
    Check out our Code of Conduct.























      0












      0








      0








      I have a home server hosting a small website that I want to be able to access by name from within my LAN. Outside the LAN everything works fine, but my router does not support NAT hairpinning and, seemingly as a result, I cannot resolve my domain name from inside the LAN. I am trying to set up dnsmasq to resolve my domain to its local IP, and forward all other requests to, say 8.8.8.8.



      My system is as follows:




      1. A wireless router at 192.168.2.1

      2. A webserver at 192.168.2.100


      3. dnsmasq running on the webserver box with the following settings: lines conf-dir=/etc/dnsmasq.d,.bak and conf-dir=/etc/dnsmasq.d,.bak uncommented in dnsmasq.conf and the additional settings



        domain-needed

        bogus-priv

        listen-address=``127.0.0.1

        listen-address=``192.168.1.42

        domain=mywebsite.com

        expand-hosts

        local=/mywebsite.com/

        no-dhcp-interface=enp2s0f0

        no-resolv

        no-poll

        server=8.8.8.8

        server=8.8.4.4



      in a file in dnsmasq.d.





      1. /etc/hosts in my server looks like



        127.0.0.1 localhost



        192.168.2.100 MyServerName mydomain.tld



        The following lines are desirable for IPv6 capable hosts
        ::1 localhost ip6-localhost ip6-loopback
        ff02::1 ip6-allnodes
        ff02::2 ip6-allrouters



      2. The router configured to use 192.168.2.100 as primary and secondary DNS.


      3. Port 53 ALLOW in ufw rules on webserver.


      My webserver can ping itself using ping mydomain.tld and nslookup mydomain.tld shows it's resolving correctly to 192.168.2.100. But nslookup from any other machine on the network gives back the external IP of my website, and no other machine can ping my webserver at mydomain.tld from insider the LAN.



      I feel my setup is close in principle but that either I'm missing something obvious, or something needs to be restarted or reloaded in order to get things working. I have tried flushing the dns cache of another machine on the LAN, and still nothing. Suggestions?









      share







      New contributor




      Stefan Dawydiak is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.












      I have a home server hosting a small website that I want to be able to access by name from within my LAN. Outside the LAN everything works fine, but my router does not support NAT hairpinning and, seemingly as a result, I cannot resolve my domain name from inside the LAN. I am trying to set up dnsmasq to resolve my domain to its local IP, and forward all other requests to, say 8.8.8.8.



      My system is as follows:




      1. A wireless router at 192.168.2.1

      2. A webserver at 192.168.2.100


      3. dnsmasq running on the webserver box with the following settings: lines conf-dir=/etc/dnsmasq.d,.bak and conf-dir=/etc/dnsmasq.d,.bak uncommented in dnsmasq.conf and the additional settings



        domain-needed

        bogus-priv

        listen-address=``127.0.0.1

        listen-address=``192.168.1.42

        domain=mywebsite.com

        expand-hosts

        local=/mywebsite.com/

        no-dhcp-interface=enp2s0f0

        no-resolv

        no-poll

        server=8.8.8.8

        server=8.8.4.4



      in a file in dnsmasq.d.





      1. /etc/hosts in my server looks like



        127.0.0.1 localhost



        192.168.2.100 MyServerName mydomain.tld



        The following lines are desirable for IPv6 capable hosts
        ::1 localhost ip6-localhost ip6-loopback
        ff02::1 ip6-allnodes
        ff02::2 ip6-allrouters



      2. The router configured to use 192.168.2.100 as primary and secondary DNS.


      3. Port 53 ALLOW in ufw rules on webserver.


      My webserver can ping itself using ping mydomain.tld and nslookup mydomain.tld shows it's resolving correctly to 192.168.2.100. But nslookup from any other machine on the network gives back the external IP of my website, and no other machine can ping my webserver at mydomain.tld from insider the LAN.



      I feel my setup is close in principle but that either I'm missing something obvious, or something needs to be restarted or reloaded in order to get things working. I have tried flushing the dns cache of another machine on the LAN, and still nothing. Suggestions?







      domain-name-system linux-networking internal-dns dnsmasq





      share







      New contributor




      Stefan Dawydiak is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.










      share







      New contributor




      Stefan Dawydiak is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.








      share



      share






      New contributor




      Stefan Dawydiak is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.









      asked 45 secs ago









      Stefan DawydiakStefan Dawydiak

      101




      101




      New contributor




      Stefan Dawydiak is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.





      New contributor





      Stefan Dawydiak is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






      Stefan Dawydiak is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






















          0






          active

          oldest

          votes












          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "2"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });






          Stefan Dawydiak is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f964492%2fconfigure-dnsmasq-as-stand-in-for-nat-hairpinning%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes








          Stefan Dawydiak is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          Stefan Dawydiak is a new contributor. Be nice, and check out our Code of Conduct.













          Stefan Dawydiak is a new contributor. Be nice, and check out our Code of Conduct.












          Stefan Dawydiak is a new contributor. Be nice, and check out our Code of Conduct.
















          Thanks for contributing an answer to Server Fault!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f964492%2fconfigure-dnsmasq-as-stand-in-for-nat-hairpinning%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          As a Security Precaution, the user account has been locked The Next CEO of Stack OverflowMS...

          Список ссавців Італії Природоохоронні статуси | Список |...

          Українські прізвища Зміст Історичні відомості |...