Services Configure DNS
IX30 User Guide
517
By default, the device's DNS server caches negative responses. Disabling this option may
improve performance on networks with transient DNS results, when one or more DNS servers
may have positive results. To disable:
(config)> service dns cache_negative_responses false
(config>
5. (Optional) Query all servers
By default, the device's DNS server queries all available DNS servers. Disabling this option may
improve performance on networks with transient DNS results, when one or more DNS servers
may have positive results. To disable:
(config)> service dns query_all_servers false
(config>
6. (Optional) Rebind protection
By default, rebind protection is disabled. If enabled, this prevents upstream DNS servers from
returning private IP addresses. To enable:
(config)> service dns stop_dns_rebind false
(config)>
7. (Optional) Allow localhost rebinding
By default, localhost rebinding is enabled by default if rebind protection is enabled. This is
useful for Real-time Black List (RBL) servers. To disable:
(config)> service dns rebind_localhost_ok false
(config)>
8. (Optional) Add additional DNS servers
a. Add a DNS server:
(config)> add service dns server end
(config service dns server 0)>
b. Set the IP address of the DNS server:
(config service dns server 0)> address ip-addr
(config service dns server 0)>
c. To restrict the device's use of this DNS server based on the domain, use the domain
command. If no domain are listed, then all queries may be sent to this server.
(config service dns server 0)> domain domain
(config service dns server 0)>
d. (Optional) Set a label for this DNS server:
(config service dns server 0)> label label
(config service dns server 0)>
9. (Optional) Add host names and their IP addresses that the device's DNS server will resolve
To Next Page
Loading...
Need help?
General
