Skip to main content
dan
Explorer II
June 3, 2021
Question

Which DNS settings make more sense? Passthrough fortigate or configure DNS server?

  • June 3, 2021
  • 0 replies
  • 1722 views

DNS resolving at a client's site is currently as follows:

 

Windows Client --> AD (samba) --> dnsmasq --> ISP DNS

 

Currently dnsmasq is running on a linux cluster that doubles as firewall/router between local lan and external network.

We are going to replace the linux clusters firewall/router capabilities with a fortigate.

 

There are two variants for DNS in this new setting (clients requirements are to still have a dnsmasq server):

 

Windows Client --> AD (samba) --> dnsmasq --> (passthrough fortigate) --> ISP DNS

or

Windows Client --> AD (samba) --> dnsmasq --> (fortigate as DNS server, recursive) --> ISP DNS

 

Does it make sense to use the fortigate as DNS server in this setup?

dnsmasq will be moved to another cluster anyway and will still be there.

 

Dan