Forge records using ACLs
The DNS Balancer is not designed to answer DNS queries through a complete and robust database, it is considered a kind of DNS router. However, it is possible to intercept queries in order to forge a response
This feature is to forge recording according an ACL, sur you can forge it globally using the computers section but in some cases, you need to forge a record according sources IP addresses.
If you did not want to create an ACL object for destination domain and record, use it directly in the rule
Here an example :
If source is 192.168.0.0/24 and query is *.google.com, then the dns reply should reply to 172.0.0.1
- On the Rules section, add a new rule and choose “Forge A response”

- Select your new rule and add the 172.0.0.1 in Value To Send field
Note: with service pack 679, you can use the “dst” object to specify multiple IP addresses.
- Click on Apply

- Select objects tab
- Click on new object
- Choose the “Web server or domain”
- Click on Add button

- Add the pattern “google.com" inside the object.

- Create another object using Source IP address type

- Add the 192.168.0.0/24 pattern inside this object

- Your rule now matches the need, it is currently inactive because you need to run “Apply rules” to make it in production mode.
