I'm looking for solution to configure ASA as DNS proxy

[vpmorozov]

I'm sure it was somewhere, but I cannot find.

How can I configure ASA as DNS Proxy (or DNS spoofing), so I can use internal ASA IP address as DNS server address on PC?

[Collin Clark]

AFAIK it can't be done on an ASA. I looked it up and there is nothing on it. You can do DNS doctoring which is completely different. You can do it on the router though.

Hope that helps.

[acomiskey]

This works...

static (outside,inside) udp interface 53 4.2.2.2 53 netmask 255.255.255.255

[Collin Clark]

That's killer Adam!

[acomiskey]

Haha thanks. I guess it's not technically a proxy as the client is still hitting the dns server, not the asa...but it will allow to use the asa address as the dns server in the client.

[vpmorozov]

Okay, that's the easy way :)

But then I need to set up static DNS address. What if I receive it through DHCP or DHCP options?