The DNS firewall can forward requests to other DNS servers of your choice depending on the requested domain. So it acts as a DNS router
To illustrate this feature, we will use our DNS firewall as a centralized DNS server. It will be able to forward requests to unknown domains using public DNS but also to forward requests to our Internal Active Directory domain "articatech.nux" to the Active Directory DNS service
In the spirit of ACLs, a DNS firewall rule is constructed by adding up objects. In our case, we will associate a "domains" object with a "destination DNS server" object
This operation is built into the firewall rules available in the section DNS / DNS Firewall / Firewall rules
You can see that there is a default rule that already exists, it is designed to relay unknown domains to the public DNS servers that you have defined in the general DNS forwarders section
Click on the “New rule” button
In Action, choose “Balance DNS Requests to” and set a rule name
Click on Add button
Although we have only one Active Directory server, the word "balance" is important because in addition to the routing functionality, the DNS firewall can also perform load balancing
Once the rule is created, click on it to display its details.