06-05-2013 11:32 PM
Hi,
We are looking for a way to forward All dns requests to internal DNS ip.
Either client changes its ip address to public dns addresses it should be forwarded to internal.
Can we do that ?
We don't want to write a deny rule for public Dns requests.
We don't want to enforce client's dns.
06-08-2013 01:16 AM
Hi, except from DNS-proxy another way to accomplish this is using U-turn NAT configuration
Source Zone: Trust-Zone
Dest Zone: Untrust-Zone
service: dns (53tcp +53udp)
Source : Your internal network
Dest: External Dns server IP (ie 8.8.8.8 google)
Source translate: dynamic-ip-port (PAT) of your internal firewall interface
Dest translate: Your internal DNS server IP
Also you need a permit security policy from Trust-Zone to Trust-Zone
The drawback that you need a NAT entry for every external dns server, but if you verify which ones is mostly used I think that 10 rules could match 90% of your dns external requests.
06-08-2013 01:36 AM
That solution is talked before.There are many Dns public and 1 rule for every ip is not good.
Thanks.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
