Description
This article describes how to configure DNS Translation in DNS Profile.
Solution
DNS translation has moved to the DNS profile configuration, allowing different translations to be applied on a per-policy basis. Prior to 6.2, this was a single table outside of the profile.
DNS filter dns-translation enforces what 'a record' (IP address) in a DNS reply will be translated into another IP address, which allows to control the DNS resolve result.
To configure a DNS filter from the GUI:
1) Go to Security Profiles -> DNS Filter.
2) Enable DNS Translation, configure as follows, and select 'Apply':
3) Apply the DNS filter profile to the firewall policy.
To configure a DNS filter from the CLI:
1) Enable dns-translation.
1) Enable dns-translation.
# config dnsfilter profile
edit "<dns-filter-profile>"
......
# config dns-translation
edit 1
set src 93.184.216.34
set dst 10.1.100.99
set netmask 255.255.255.255
next
end
end
