Skip to main content
subramanis
Staff
Staff
January 3, 2022

Technical Tip: Local DNS records and Non-local DNS records

  • January 3, 2022
  • 0 replies
  • 2992 views
Description This article describes that Local DNS records do resolve but Non-local DNS records do not resolve.
Scope Users should resolve only on the local database, it should not send the request to the system DNS if there are no records found in the local database.
Solution

kb-image.JPG

 

DNS configuration on the firewall.

 

# config system dns-databas
    edit "demo"
        set domain "demo.com"
        set view public
# config dns-entr
    edit 1
        set hostname "fgt"
        set ip 1.2.3.4


Enabling the DNS server on the interface.

 

# config system dns-serve
    edit "wan1"
        set mode non-recursive

 

Now the user can only resolve the local DNS records and Non-local records do not resolve.

 

C:\Users\fortinet>nslookup
Default Server: UnKnown
Address: 10.253.4.134

> fgt.demo.com
Server: UnKnown
Address: 10.253.4.134

Name: fgt.demo.com
Address: 1.2.3.4

 

> google.com
Server: UnKnown
Address: 10.253.4.134

*** UnKnown can't find google.com: Non-existent domain

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT