Skip to main content
krajaa
Staff
krajaa
Staff
December 23, 2020

Technical Tip: Configure DNS Translation in DNS Profile

  • December 23, 2020
  • 0 replies
  • 2656 views

Description
This article describes how to configure DNS Translation in DNS Profile.

Solution
DNS translation has moved to the DNS profile configuration, allowing different translations to be applied on a per-policy basis. Prior to 6.2, this was a single table outside of the profile.
DNS filter dns-translation enforces what 'a record' (IP address) in a DNS reply will be translated into another IP address, which allows to control the DNS resolve result.
 
To configure a DNS filter from the GUI:

1) Go to Security Profiles -> DNS Filter.
2) Enable DNS Translation, configure as follows, and select 'Apply':
3) Apply the DNS filter profile to the firewall policy.



 
 
To configure a DNS filter from  the CLI:

1) Enable dns-translation.
# config dnsfilter profile
    edit "<dns-filter-profile>"
......
# config dns-translation
    edit 1
        set src 93.184.216.34
        set dst 10.1.100.99
        set netmask 255.255.255.255
    next
end
end

 

Terms & ConditionsAccessibility statement