Guide: How to customize Firewalla DNS service

Follow

Comments

5 comments

  • Avatar
    Eric Flores

    This is exactly what I needed to make my Nginx Proxy Manager configuration work. I need to map the external subdomains internally as aliases to existing devices (I'm not going assign the external domain as the search/local domain).

    My only comment is that, be aware that you can repeat the line without having to modify the 'address' key. This is not clear, since the example has a single line. For example:

    address=/host1.example.com/1.2.3.4
    address=/host2.example.com/1.2.3.4
    address=/host3.example.com/1.2.3.4

    Be aware that you forward all hosts to a single host (NPM) and then it will take care of forwarding to the right host. This explains the repeated IP address above.

    Right now I'm running NPM outside of my Firewalla (one change at a time). But this is essential service and I plan to move it as a docker instance later.

    0
    Comment actions Permalink
  • Avatar
    aaiyar

    Can someone help me with a suggestion?

    I need DNS queries from a particular device on my LAN (known MAC and IP address) to be redirected to a specific DNS server.

    How do I do this?

    0
    Comment actions Permalink
  • Avatar
    Hoby Brenner

    I know it's probably a longshot, but is there anyway to make this work on all vlans/networks on my FWG without allowing it on a specific guest network/Vlan?

    I mean technically Guest is off segmented on its own, but you can still do name or reverse lookups on that network and recon internal DNS if your doing forwarding like the example.

     

    0
    Comment actions Permalink
  • Avatar
    Firewalla

    Do you mean gust network people can do a random test for devices on the LAN side by guessing the domain name?

    0
    Comment actions Permalink
  • Avatar
    Hoby Brenner

    I guess ultimately what I am trying to achieve is to prevent guest or isolated work networks from resolving dns of private internal clients or devices.  Is there a way to achieve this without assigning those networks external dns servers?

     

    0
    Comment actions Permalink

Please sign in to leave a comment.