This morning, as a test, I did the following:

ASA internal ip address: 10.20.0.1

Workstation address: 10.20.0.50

I set the workstation's DNS server as 10.20.0.1

In the ASA I did:

static (outside,inside) udp interface 53 4.2.2.1 53 netmask 255.255.255.255

I could browse the web. My question is the fact that I don't own the 4.2.2.1 address, as that's Verizon's DNS server. To Verizon, would that look like 4.2.2.1 is querying their own DNS server? Am I, in effect, spoofing an address that they own, or am I really just forwarding the 53/udp traffic out TO 4.2.2.1 as my public address that's assigned to my ASA's outside interface? Just curious. (I didn't leave this in production.)

Thanks,

John