Resolve machine name from IP

[limohabs]

Hi,

I'm new to this forum, been using Wingate for a few years already. Now that we are turning our entire network DHCP, we need to have our Wingate resolving IP to machine names.

I've read a few topics on this forum and managed to configure my Wingate accordingly.

But here is my problem:
Wingate only resolves names from IP on my LAN. Cannot resolve from my VPNs. While on my AD DNS server, I'm able to resolve all IPs

Here is my Wingate setup
Version: GateKeeper 6.1.1
DHCP service: off
DNS service: off
DNS/WINS Resolver, DNS section: AD DNS server

TCP/IP Setup (2 NICs)
1) LAN
IP: static IP
Gateway: gateway that the DHCP server attributes (also tried without an IP)
DNS: AD DNS server

2) WAN
IP: static WAN IP
Gateway: static WAN gateway
DNS: Internet provider's DNS

I've also double-checked the NETBios broadcast on my routers and make sure they're not blocking it.

Thanks for any help.

Martin

[adrien]

Hi Martin

Normally UDP broadcasts are not relayed (except for WinGate VPN). Are you using WinGate VPN?

If your WAN / VPN is using your AD, then they will be registering their IPs into the AD DNS server.

Is WinGate using your AD DNS server? Is your AD DNS server using WinGate as a forwarder? If the latter, then the former shouldn't be true (or you'll have lookup loops).

For WinGate 6 the only way I can think to get this working would be

a) AD DNS Server doesn't use WinGate as forwarder, but instead uses your ISP DNS server.
b) WinGate only uses AD DNS server for DNS

Then WinGate will be able to resolve those reverse records.

WinGate 7 gives you more control since you can specify which DNS server to use on a domain-by-domain basis, and therefore you could get WinGate 7 to use your AD DNS server for reverse lookups for your WAN, but still use the ISP DNS server for non-local lookups.

If you'd like to try WinGate 7, let us know (send an email to support@wingate.com).

Regards

Adrien

[limohabs]

Hi Adrien and thanks for the quick and accurate reply.

Effectively, my DNS server had the Wingate's LAN IP as forwarder. I changed it for the ISP's.

Now, it's perfect. Every machine on my LAN, subnetted networks and VPNs are resolved (nslookup) by the Wingate machine.

But 1 problem remains: I can't assume any user by machine name. Even though I see the FQDN machine name in the Gatekeeper's Activity screen.

How can you set Gatekeeper to assume user by machine name?

Thanks,

Martin

[adrien]

Hi

WinGate 6 can only do that if it acts as the DHCP server for your LAN. It gets the information about the computername from the DHCP requests. What it is displaying as a result of reverse IP lookup isn't reliable unfortunately.

Regards

Adrien

[limohabs]

Hi adrien,

I managed to assume users. After I checked method "NTLM" under "WWW Proxy server properties", everything worked fine.

Thanks Adrien

Martin