Chapter 30 System
USG20(W)-VPN Series User’s Guide
548
30.6.3 Address Record
An address record contains the mapping of a Fully-Qualified Domain Name (FQDN) to an IP
address. An FQDN consists of a host and domain name. For example, www.zyxel.com is a fully
qualified domain name, where “www” is the host, “zyxel” is the second-level domain, and “com” is
the top level domain. mail.myZyXEL.com.tw is also a FQDN, where “mail” is the host, “myZyXEL” is
the third-level domain, “com” is the second-level domain, and “tw” is the top level domain.
Remove
To remove an entry, select it and click
Remove
. The USG confirms you want to remove it
before doing so. Note that subsequent entries move up by one when you take this action.
#
This is the index number of the MX record.
Domain Name
This is the domain name where the mail is destined for.
IP/FQDN
This is the IP address or Fully-Qualified Domain Name (FQDN) of a mail server that
handles the mail for the domain specified in the field above.
Security Option
Control
Click
Show Advanced Settings
to display this part of the screen. There are two control
policies:
Default
and
Customize
.
Edit
Click either control policy and then click this button to change
allow
or
deny
actions for
Query Recursion
and
Additional Info from Cache
.
Priority
The
Customize
control policy is checked first and if an address object match is not
found, the
Default
control policy is checked.
Name
You may change the name of the
Customize
control policy.
Address
These are the object addresses used in the control policy. RFC1918 refers to private IP
address ranges. It can be modified in
Object > Address
.
Additional Info
from Cache
This displays if the USG is allowed or denied to cache Resource Records (RR) obtained
from previous DNS queries.
Query
Recursion
This displays if the USG is allowed or denied to forward DNS client requests to DNS
servers for resolution.
Service Control
This specifies from which computers and zones you can send DNS queries to the USG.
Add
Click this to create a new entry. Select an entry and click
Add
to create a new entry after
the selected entry.
Edit
Double-click an entry or select it and click
Edit
to be able to modify the entry’s settings.
Remove
To remove an entry, select it and click
Remove
. The USG confirms you want to remove it
before doing so. Note that subsequent entries move up by one when you take this action.
Move
To change an entry’s position in the numbered list, select the method and click
Move
to
display a field to type a number for where you want to put it and press [ENTER] to move
the rule to the number that you typed.
#
This the index number of the service control rule. The ordering of your rules is important
as rules are applied in sequence.
The entry with a hyphen (-) instead of a number is the USG’s (non-configurable) default
policy. The USG applies this to traffic that does not match any other configured rule. It is
not an editable rule. To apply other behavior, configure a rule that traffic will match so
the USG will not have to use the default policy.
Zone
This is the zone on the USG the user is allowed or denied to access.
Address
This is the object name of the IP address(es) with which the computer is allowed or
denied to send DNS queries.
Action
This displays whether the USG accepts DNS queries from the computer with the IP
address specified above through the specified zone (
Accept
) or discards them (
Deny
).
Table 234
Configuration > System > DNS (continued)
LABEL
DESCRIPTION
Summary of Contents for ZyWall USG20-VPN
Page 17: ...17 PART I User s Guide ...
Page 18: ...18 ...
Page 99: ...99 PART II Technical Reference ...
Page 100: ...100 ...
