I think you're asking what DNS server(s) the client will use. If so, the DNS proxy setting allows you to define the default primary & secondary DNS servers to hand out to the clients. You can also configure static DNS entries. The static DNS entries will be used to respond to clients' DNS requests when the domain matches. Static DNS entries will take precedence over dynamic DNS.
thanks for answer, but i am asking just when enabled dns proxy on any interface, what could be clients dns ip address,,
for example i enabled dns proxy on the firewall interface (ip address called 192.168.1.1)
at this point clients dns ip address could be 192.168.1.1 or could be any dns server?
Yes, the client can point to the interface IP 192.168.1.1 as the DNS server. For all DNS queries that are directed to an interface IP address, the firewall supports the selective directing of queries to different DNS servers based on full or partial domain names.
If the domain name is not found in the DNS proxy cache, the domain name is searched for a match based on configuration of the entries in the specific DNS proxy object (on the interface on which the DNS query arrived) and forwarded to a name server based on the match results. If no match is found, the default name servers are used. Static entries and caching are also supported.
Optionally in cases where your clients are already pointing to an existing DNS server like 126.96.36.199, you can use our DNS proxy to intercept DNS queries and control the DNS responses. DNS proxy will match on the domain name and respond with the static DNS entry.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!