Transparent conditional DNS forwarder
##To configure the source-IP for the DNS forwarding:
config system dns-database
edit "Internal Domains"
set domain "sumit.com"
set authoritative disable
set forwarder "14.140.40.11"
set source-ip 14.140.40.108
next
end
##DNS Profile configuration:
config dnsfilter profile
edit "test"
set transparent-dns-database "Internal Domains"
next
end
##Policy Configuration (Proxy mode):
config firewall policy
edit 1
set name "Allow_internet_traffic"
set uuid d2cdbbde-62e4-51ef-36e1-3e14c83e2aa2
set srcintf "port3"
set dstintf "port1"
set action accept
set srcaddr "all"
set dstaddr "all"
set schedule "always"
set service "ALL"
set utm-status enable
set inspection-mode proxy
set dnsfilter-profile "test"
set nat enable
next
end
Comments
Post a Comment