Chapter 8
Configuration of network services
108
Enable DNS forwarding
The
DNS
module allows forwarding of certain DNS requests to specific DNS servers. This
feature can be helpful for example when we intend to use a local DNS server for the local
domain (the other DNS queries will be forwarded to the Internet directly — this will speed
up the response). DNS forwarder’s settings also play role in configuration of private networks
where it is necessary to provide correct forwarding of requests for names in domains of remote
subnets (for details, check chapter
).
Request forwarding is defined by rules for DNS names or subnets. Rules are ordered in a list
which is processed from the top. If a DNS name or a subnet in a request matches a rule, the
request is forwarded to the corresponding DNS server. Queries which do not match any rule
are forwarded to the “default” DNS servers (see above).
Note:
If
Simple DNS resolution
is enabled (see below), the forwarding rules are applied only if
the
DNS
module is not able to respond by using the information in the
hosts
system file and/or
by the DHCP lease table.
Clicking on the
Define
button in the
DNS
module configuration (see figure
) opens a dialog
for setting of rules concerning forwarding of DNS queries.
Figure 8.3
Specific settings of DNS forwarding
The rule can be defined for:
•
DNS name — queries requiring names of computers will be forwarded to this DNS
server (so called
A
queries)
•
a subnet — queries requiring IP addresses of the particular domain will be forwarded
to the DNS server (reverse domain —
PTR
queries)
Rules can be reordered by arrow buttons. This enables creating of more complex combinations
of rules — e.g. exceptions for certain workstations or subdomains. As the rule list is processed
from the top downwards, rules should be ordered starting by the most specific one (e.g. name
of a particular computer) and with the most general one at the bottom (e.g. the main domain
of the company). Similarly to this, rules for reversed DNS queries should be ordered by subnet
mask length (e.g. with
255.255.255.0
at the top and
255.0.0.0
at the bottom). Rules for
Summary of Contents for KERIO WINROUTE FIREWALL 6
Page 1: ...Kerio WinRoute Firewall 6 Administrator s Guide Kerio Technologies s r o...
Page 157: ...12 3 Content Rating System Kerio Web Filter 157 Figure 12 7 Kerio Web Filter rule...
Page 247: ...19 4 Alerts 247 Figure 19 14 Details of a selected event...
Page 330: ...Chapter 23 Kerio VPN 330 Figure 23 55 The Paris filial office VPN server configuration...
Page 368: ...368...
