DFL-800-1600-2500-How-to-configure-DNS-Relay

DFL-800 1600 2500 – How to configure DNS Relay

DFL-800_1600_2500-How_to_configure_DNS_Relay_img_0

Documento Tratto Dal Seguente URL:

ftp://ftp.dlink.co.uk/dfl_firewall/dfl-260/DFL-800_1600_2500-How_to_configure_DNS_Relay.pdf


How to configure DNS Relay

This example describes about firewalls support to relay DNS query packets from LAN to
Internet for domain name resolving. All DFL firewalls (DFL-210/800/1600/2500) support
this feature from firmware v2.04 and later.

Note: About this feature, it performs relay/forward DNS packets only since D-Link DFL
firewalls don’t built-in DNS server in system kernel. Therefore, it can not instead of real
DNS server to provide domain name resolving and related functionality.

Details:
– LAN IP on firewall: 192.168.1.1 (with the function of DNS relay)
– Lannet on firewall: 192.168.1.0/24
– DNS Server on Internet: 12.0.0.1

1. Addresses
Go to Objects -> Address book -> InterfaceAddresses
Create an IP Address called dns_server with address 12.0.0.1
Click Ok.

2. Create IP Rules to redirect DNS packets to Internet
Go to Rules -> IP Rules
Create a new IP Rule with SAT action.

In the General tab:
General:

DFL-800_1600_2500-How_to_configure_DNS_Relay_img_1

Name: SAT_DNS_Relay
Action: SAT
Service: dns_all

Address Filter:

DFL-800_1600_2500-How_to_configure_DNS_Relay_img_2

Translate the: Destination IP Address
New IP Address: dns_server

Click Ok.

Create an identical IP Rule with NAT action. If the environment is not NAT, create a
ALLOW rule instead.

In the General tab:

DFL-800_1600_2500-How_to_configure_DNS_Relay_img_3

Name: Allow_DNS_Relay
Action: NAT
Service: dns_all

Address Filter:

DFL-800_1600_2500-How_to_configure_DNS_Relay_img_4-1024x296

Source Interface: lan
Source Network: lannet
Destination Interface: core
Destination Network: lan_ip

Click Ok.

Make sure these two rules are triggered before any generic rules (e.g. allow_standard
rules).

And also, configure all PCs to have the firewall lan_ip (192.168.1.1) as DNS server.

Save and activate the configuration on firewall

 

Fatto Cio’ riavviate e vedete se tutto funziona correttamente


Download PDF


Informazioni / problemi


® Dream Land by Giovanni Bifera


LE INFORMAZIONI CONTENUTE SONO FORNITE SENZA GARANZIA DI ALCUN TIPO, IMPLICITA OD ESPLICITA. L’UTENTE SI ASSUME L’INTERA RESPONSABILITA’ PER L’UTILIZZO DI QUESTE INFORMAZIONI. IN NESSUN CASO SI RENDONO RESPONSABILI PER DANNI DIRETTI, INDIRETTI O ACCIDENTALI CHE POSSANO PROVOCARE PERDITA DI DENARO O DI DATI.


 

 




Numero Di Accessi Alla Pagina: 7235

Taggato con: , , ,

Lascia un commento

Questo sito usa Akismet per ridurre lo spam. Scopri come i tuoi dati vengono elaborati.