I'm looking for solution to configure ASA as DNS proxy

Unanswered Question
Jul 8th, 2009

I'm sure it was somewhere, but I cannot find.

How can I configure ASA as DNS Proxy (or DNS spoofing), so I can use internal ASA IP address as DNS server address on PC?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Collin Clark Wed, 07/08/2009 - 06:18

AFAIK it can't be done on an ASA. I looked it up and there is nothing on it. You can do DNS doctoring which is completely different. You can do it on the router though.

Hope that helps.

acomiskey Wed, 07/08/2009 - 06:54

This works...

static (outside,inside) udp interface 53 53 netmask

acomiskey Wed, 07/08/2009 - 07:01

Haha thanks. I guess it's not technically a proxy as the client is still hitting the dns server, not the asa...but it will allow to use the asa address as the dns server in the client.

vpmorozov Wed, 07/08/2009 - 23:28

Okay, that's the easy way :)

But then I need to set up static DNS address. What if I receive it through DHCP or DHCP options?


This Discussion