This feature is to forge recording according an ACL, sur you can forge it globally using the computers section but in some cases, you need to forge a record according sources IP addresses.
If you did not want to create an ACL object for destination domain and record, use it directly in the rule
Here an example :
If source is 192.168.0.0/24 and query is *.google.com, then the dns reply should reply to 172.0.0.1
- On the Rules section, add a new rule and choose “Forge A response”
- Select your new rule and add the 172.0.0.1 in Value To Send field
Note: with service pack 679, you can use the “dst” object to specify multiple IP addresses.
- Click on Apply
- Select objects tab
- Click on new object
- Choose the “Web server or domain”
- Click on Add button
- Add the pattern “google.com" inside the object.
- Create another object using Source IP address type
- Add the 192.168.0.0/24 pattern inside this object
- Your rule now matches the need, it is currently inactive because you need to run “Apply rules” to make it in production mode.
