1

I have a firewall that is setup but need to have all users inside the network to use a preset dns server. While I know that I can set up this in the DHCP it does not stop a user from changing it in the computer. Is there a way to set up a NAT rule that will cause all DNS requests to be redirected to a set outside DNS server?

  • 4
    Why don't you simply block all outgoing DNS but to the server you need? – Zac67 Sep 22 '18 at 20:59
  • Welcome. What kind of equipment do you have? I know pfsense does something like what you want, though as Zac says, is there a reason you can't block all non-approved? What problem are you solving? – jonathanjo Sep 22 '18 at 21:30
  • We use cisco for a outside dns server to controll content that can be seen. The problem I have is if anyone changes the computer dns to say google it bypasses the cisco filtering. The units that we are using are Sonicwall TZ205W. – nick Sep 23 '18 at 3:09
  • As Zac has suggested, you can allow DNS to your approved DNS servers, and then block DNS to any other DNS servers. That has no affect on people using IP addresses or host files. – Ron Maupin Sep 23 '18 at 23:10
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer. – Ron Maupin Dec 25 '18 at 9:35
2

If I were trying to accomplish this, I would set an outgoing firewall rule to allow DNS to those specific whitelisted servers, followed by a second rule to block all DNS.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.