Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Replies 4 replies
  • Answers 1 answer
  • Subscribers 5 subscribers
  • Views 1500 views
  • Users 0 members are here
Options
Suggested

Transparent dnat

infinityz

Hi all and Happy New year!

Has the transparent dnat function been implemented on 17.5 release? This is actually the only feature which is preventing me to make the big jump from old SG platform.

To be clear, what I need is redirect all the outgoing DNS traffic to a specific host.

Tried to googleing around, but all the info I've found are related to 17.0, so wonder if the latest version made the trick.

Thanks in advance everyone

Parents Reply Children
  • 0 in reply to LuCar Toni

    Thanks for your reply Lucar, will keep an eye on that thread.

    The reason behind this configuration is actually pretty simple! There are a numbers of IoT devices which just ignore the dns pulled from dhcp and keep using Google dns rather.

    Block outgoing DNS requests would not solve the issue but just make these devices unusable.

    Transparent dnat is the only way to force the use of the internal dns.

    Thanks

  • +1 in reply to infinityz

    Can you name such devices? This seems to be highly un-compliant to do such a behavior. And such devices would be rather in your isolated network instead of your company network. 

    Most of the time, in guest networks, i allow to perform such actions. 

    But if such IoT Devices are performing such stuff, i would not like to have them in the same broadcast domain. It is like some kind of "old" printer. Easy way to use them as a jumphost as a hacker. Check out the current 35C3 in Germany. 

    Just my 2 Cents about this topic. It does not resolve your issue / limitation. 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    Virgin Media TV Boxes (v5 in my case) ignore DNS for some of their implemented software and try to utilise Virgins DNS which if unavailable will cause some software to fail. Google Chromecasts prioritise Google but should also use local (at least in early versions). Some brands of home automated lighting uses fixed DNS as well.

    Those are a few I'm aware of.

Unfiltered HTML