Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 8 replies
  • Answers 1 answer
  • Subscribers 4 subscribers
  • Views 9296 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNS Zones, or selective DNS responses based on source IP/Zone

jdmoore0883

Hey Guys!

This question is more of a "if possible" and "how"... Specific answers are always great, but so would any links to any How-To's, or other documentation explaining how to accomplish this.

So the Subject says it all in a nutshell, but it is possible I am not using the "proper" terms, so here are the details...

My UTM is set to forward and resolve DNS, and the details noted below work fine. My Internal Hosts can resolve DNS on both defined objects noted below, as well as external DNS in general (like google.com)

Let's say I have these internal hosts that resolve to IPs (based on DHCP Reservations and object definition):

Internal1 = 192.168.10.10

Internal2 = 192.168.10.11

And let's say I have these "external" hosts that resolve to IPs (again, based on the object definition):

External1 = 1.2.3.4

External2 = 5.6.7.8

In my current config, if I allow DNS resolution by external hosts, they can resolve those internal hosts, I do not want that.

I want *ALL* my internal hosts to be able to resolve DNS (as they can right now), but I only want to resolve the External hosts for DNS requests sourcing from outside my network.

Is this possible?

If so, how could I accomplish this?



This thread was automatically locked due to age.
Parents
  • 0

    Hi JD,

     

    yes, this is possible, but unfortunately you cannot setup this on the Webadmin Gui nor is it supported and I think it will break down your UTM DNS Configuration.

    In short, I won't do this :)

    UTM uses bind as DNS Server, you can use the "view" syntax where you can specify which IP Address/Ranges  is able to see which domains / zone files, do recursion, allow zonetransfers,...

    If you like, you can configure this on the command line, but any changes to DNS / Objectcs with DNS Hostnames in the Webadmin probably will revert your commandline changes.

    Editing bind "views"  could be an interessting feature for http://ideas.sophos.com 

    Greetings

Reply
  • 0

    Hi JD,

     

    yes, this is possible, but unfortunately you cannot setup this on the Webadmin Gui nor is it supported and I think it will break down your UTM DNS Configuration.

    In short, I won't do this :)

    UTM uses bind as DNS Server, you can use the "view" syntax where you can specify which IP Address/Ranges  is able to see which domains / zone files, do recursion, allow zonetransfers,...

    If you like, you can configure this on the command line, but any changes to DNS / Objectcs with DNS Hostnames in the Webadmin probably will revert your commandline changes.

    Editing bind "views"  could be an interessting feature for http://ideas.sophos.com 

    Greetings

Children
No Data
Unfiltered HTML