DNS: Difference between revisions
Content added Content deleted
(→Zone) |
|||
| Line 245: | Line 245: | ||
* When the client tries to access this IP address, the security appliance drops the packets because it does not allow packet redirection on the same interface. |
* When the client tries to access this IP address, the security appliance drops the packets because it does not allow packet redirection on the same interface. |
||
* Configure static NAT for the DNS server first and if the DNS ALG is enabled, public-to-private and private-to-public static address translation can occur for A-records in DNS replies. |
* Configure static NAT for the DNS server first and if the DNS ALG is enabled, public-to-private and private-to-public static address translation can occur for A-records in DNS replies. |
||
<br /> |
|||
= DNS Record Types = |
|||
A Address record Returns a 32-bit IPv4 address, |
|||
AAAA IPv6 address record |
|||
CNAME Canonical name record Alias of one name to another, DNS lookup will continue by retrying the lookup with the new name. |
|||
LOC Location record Specifies a geographical location associated with a domain name |
|||
MX Mail exchange record Maps a domain name to a list of message transfer agents for that domain |
|||
NS Name server record Delegates a DNS zone to use the given authoritative name servers |
|||
PTR Pointer record Pointer to a canonical name. Unlike a CNAME, DNS processing stops and just the name is returned. The most common use is for implementing reverse |
|||
DNS lookups. |
|||
SOA Start of [a zone of] authority record Specifies authoritative information about a DNS zone, including the primary name server, the email of the domain administrator, the domain serial |
|||
number,etc |
|||
SRV Service locator Generalized service location record, used for newer protocols instead of creating protocol-specific records such as MX. |
|||
TXT Text record Originally for arbitrary human-readable text in a DNS record. Now more often carries machine-readable data, opportunistic encryption, Sender Policy |
|||
Framework, etc. |
|||
* All cached records Returns all cached records of all types known to the name server. If the name server does not have any information on the name, the request will be |
|||
forwarded on. |
|||
AXFR Authoritative Zone Transfer Transfer entire zone file from the master name server to secondary name servers. |
|||
IXFR Incremental Zone Transfer Requests a zone transfer of the given zone but only differences from a previous serial number. |
|||
<br /> |
<br /> |
||