Cisco ASA 5505 Configuration Manual page 554

Configuration Examples for Network Object NAT
Figure 27-61
Step 9 Click Advanced to configure the real and mapped interfaces and port translation for SMTP.
Figure 27-62
Click OK to return to the Edit Network Object dialog box, click OK again, and then click Apply.
Step 10
DNS Server on Mapped Interface, Web Server on Real Interface (Static NAT
with DNS Modification)
For example, a DNS server is accessible from the outside interface. A server, ftp.cisco.com, is on the
inside interface. You configure the adaptive security appliance to statically translate the ftp.cisco.com
real address (10.1.3.14) to a mapped address (209.165.201.10) that is visible on the outside network.
(See
inside users who have access to ftp.cisco.com using the real address receive the real address from the
DNS server, and not the mapped address.
Cisco ASA 5500 Series Configuration Guide using ASDM
27-32
Defining the SMTP Server Address and Configuring Static NAT
Setting the Interfaces and Port
Figure 27-63.) In this case, you want to enable DNS reply modification on this static rule so that
Chapter 27 Configuring Network Object NAT
OL-20339-01