DNS Server FortiGate

Forum|Forum|2 years ago
June 17, 2024
6 replies
3192 views

Hi everyone, I need help with the DNS server on Fortigate. I'm using Forti as a DNS server and currently, I'm using the recursive mode because we have a DNS database. As I understand it, the recursive mode will query the DNS database first, and if it doesn't find the record, it will forward the query to the DNS system (I've set the DNS system to 8.8.8.8). The problem is that I have some domains mapped to private IPs, and when using Forti as the DNS server in recursive mode, it cannot resolve those domains. Is there any way to fix this issue?

Best answer by ebilcari

The concept of "not in the database" is valid for the whole domain only, not for the subdomains. As long as the domain is present in the database every request for it's subdomains will not be forwarded. If the entry is not found locally it will respond with non existing domain. Take a look at this simple test:

dns server.PNG

ebilcari

Staff

I think this is a DNS server behavior, if the domain exist locally all the subdomains for that domain will be searched locally, the requests will not be forwarded to the external DNS server. As a workaround you can create another/similar domain for the local DNS database.

Emirjon

namlhAuthor

New Member

Hi thanks for your answer,

I have also thought about that method, but if there are too many domains mapped to private IPs and they change frequently, that approach is not practical because it requires too much manual work

ebilcari

Staff

As I know this is a limit for the standard DNS server not only a limitation of FGT.

If the network has a private DNS server configured with all this private domains you can choose to forward all the request without specifying domains in the local database of the FGT.

Emirjon

Sign up

Login with SSO

Login to the community

Login with SSO