DNS Server SoftPak
DNS Server
The new DNS Server SoftPak allows you to manage domains and their records. The DNS management forms are located under Network, DNS.
Management Interfaces - Simple or Full
The DNS SoftPak supports two modes of management:
- Simple is designed for those who primarily use DNS to manage hosts. A or CNAME records are automatically managed.
- Full allows for full DNS configuration.
For each domain you can control networks that can query and transfer the domain.
- Query specifies the networks that are allowed to perform UDP lookups of the domain. On the InstaGate this defaults to Trusted so only LAN, routes, and IPSec tunnels may query. Custom allows you to specify networks that can query. All means anyone including the DMZ and WAN can perform lookups.
- Transfer specifies the networks that are allowed to perform TCP transfers of the domain. Normally this is set for None, but if you want to enable secondary domain servers, you will need to configure those servers under the Custom option or Trusted (InstaGate only) for local-only support.
Notification settings control which secondary servers to notify after domain records have changed. The available options are:
- None. No servers will be notified.
- Nameservers. Hosts defined by NS records for this domain will receive notifications.
- Custom. Explicitly specify host addresses that will be notified.
For the InstaGate, Custom and Name Server rules are evaluated to automatically enable or disable WAN firewall rules.
You can toggle the management mode from either the Domain or Record list forms.
Gateway Anti-Spyware DNS Scanning
If you have Gateway Anti-Spyware with DNS scanning enabled, you will see a warning for LAN side configuration. Due to how DNS scanning operates, you are not able to limit queries on the LAN side but you are able to do so for the WAN.
Additional DNS Settings
You now have the ability, even without the DNS Server SoftPak, to set the assigned DNS server for the DHCP and PPTP servers on InstaGate.
| 
