On Sun, August 1, 2004 17:31, jeremy@linuxwebguy.com said: > I want requests made from the outside world to resolve to the real > Internet IP, but requests made from the local LAN to resolve to the > internal IP, since the external IPs won't quite work right. Just how are you planning to get your gateway's legitimate IP listed as the authoritative DNS server for your domain? You're aware that reverse-DNS is still going to show they dynamic block of your ISP, right? What most of us do is use some sort of dynamic DNS resolver, or the services of our Registrar, to point the whole domain (*.domain.grp) at our firewall and let the firewall sort out which ports to forward where. This makes it appear to the outside world that your firwall is your webserver/mailserver/desktop/torrentserver, and your internal network sorts things out on it's own. Unless you really want the "real world" to have direct access to each of your internal machines, doing external DNS is not the way to go.