Transparent conditional DNS forwarder






##To configure the source-IP for the DNS forwarding:

config system dns-database

    edit "Internal Domains"

        set domain "sumit.com"

        set authoritative disable

        set forwarder "14.140.40.11" 

        set source-ip 14.140.40.108

    next

end


##DNS Profile configuration:

config dnsfilter profile

    edit "test"

        set transparent-dns-database "Internal Domains"

    next 

end


##Policy Configuration (Proxy mode):

config firewall policy

    edit 1

        set name "Allow_internet_traffic"

        set uuid d2cdbbde-62e4-51ef-36e1-3e14c83e2aa2

        set srcintf "port3"

        set dstintf "port1"

        set action accept

        set srcaddr "all"

        set dstaddr "all"

        set schedule "always"

        set service "ALL"

        set utm-status enable

        set inspection-mode proxy

        set dnsfilter-profile "test"

        set nat enable

    next

end

Comments

Popular posts from this blog

Configure IPsec site-to-site VPN in Linux Machine

TACACS+ Installation on Linux [CentOS]

Free Radius setup/configuration in Linux [Ubuntu/CentOS]