Technical Tip: Local DNS records and Non-local DNS records

[subramanis]

Description	This article describes that Local DNS records do resolve but Non-local DNS records do not resolve.
Scope	Users should resolve only on the local database, it should not send the request to the system DNS if there are no records found in the local database.
Solution	DNS configuration on the firewall. # config system dns-databas     edit "demo"         set domain "demo.com"         set view public # config dns-entr     edit 1         set hostname "fgt"         set ip 1.2.3.4 Enabling the DNS server on the interface. # config system dns-serve     edit "wan1"         set mode non-recursive Now the user can only resolve the local DNS records and Non-local records do not resolve. C:\Users\fortinet>nslookup Default Server: UnKnown Address: 10.253.4.134 > fgt.demo.com Server: UnKnown Address: 10.253.4.134 Name: fgt.demo.com Address: 1.2.3.4 > google.com Server: UnKnown Address: 10.253.4.134 *** UnKnown can't find google.com: Non-existent domain