Digi IX20 - Page 677

Services ConfigureDNS
IX20 User Guide
677
l
Asingle IPaddress or host name.
l
Anetwork designation in CIDRnotation, for example, 192.168.1.0/24.
l
any: No limit to IPv4 addresses that can access the DNSservice.
d. Click  again to list additional IPaddresses or networks.
n
To limit access to specified IPv6 addresses and networks:
a. Click IPv6 Addresses.
b. For Add Address, click .
c. For Address, enter the IPv6 addressor network that can accessthe device's DNS
service. Allowed values are:
l
Asingle IPaddress or host name.
l
Anetwork designation in CIDRnotation, for example, 2001:db8::/48.
l
any: No limit to IPv6 addresses that can access the DNSservice.
d. Click  again to list additional IPaddresses or networks.
n
To limit access to hosts connected through a specified interface on the IX20 device:
a. Click Interfaces.
b. For Add Interface, click .
c. For Interface, select the appropriate interface from the dropdown.
d. Click  again to allow accessthrough additional interfaces.
n
To limit access based on firewall zones:
a. Click Zones.
b. For Add Zone, click .
c. For Zone, select the appropriate firewall zonefrom the dropdown.
See Firewall configuration for information about firewall zones.
d. Click  again to allow accessthrough additional firewall zones.
5. (Optional) Cache negative responsesis enabled by default. Disabling this option may improve
performance on networkswith transient DNSresults, when one or more DNSservers may have
positive results. To disable, click to toggle off Cache negative responses.
6. (Optional) Query all serversis enabled by default. This option is useful when only some DNS
servers will be able to resolve hostnames. To disable, click to toggle off Query all servers.
7. (Optional) Rebind protection, if enabled, prevents upstream DNSservers from returning
private IPaddresses. To enable, click Rebind protection.
8. (Optional) Allow localhost rebindingisenabled by default if Rebind protection is enabled.
This is useful for Real-time Black List (RBL) servers.
9. (Optional) Type the IPaddressof the Fallback server. This is a DNSserver to beused in the
absence of any other server. The default is 8.8.8.8.
10. (Optional) To add additional DNSservers:
a. Click DNS servers.
b. For Add Server, click .
c. (Optional) Enter a label for the DNSserver.
d. For DNS server, enter the IPaddress of the DNSserver.