Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 9: Configuring Proxies
Configuring proxies
Configuring
proxies
266
Notes on using the DNS proxy
If you have many hosts on a trusted network that point to an external DNS
server, and you want these hosts to use the unbound DNS server on the
Sidewinder G2 instead, you have two options:
• You can modify each of the individual hosts to point to the unbound DNS
server.
• You can configure a DNS proxy rule on the Sidewinder G2 that redirects the
DNS traffic from the trusted burb in which the hosts reside to the unbound
DNS server. This may be the preferred option if you have hundreds or
thousands of local hosts, because you can make one change on the
Sidewinder G2 rather the hundreds or thousands of individual changes.
When defining the DNS proxy rule, be sure to set the following information
on the Source/Dest tab in the Proxy Rule window:
– Set the NAT Address field to Host: localhost.
– Set the Redirect Host field to IPAddr: Firewall. The DNS proxy will not
allow redirection to any other loopback addresses (127.2.0.1).
Important: If your Sidewinder G2 uses split DNS mode, do not create this type of
proxy rule on the Internet burb, because traffic will bypass the Internet DNS name
server.
The pre-configured Sidewinder G2 proxies consist of standard settings and
require very little modification. For most proxies the only configuration decision
to be made is whether to enable or disable each individual proxy. However, the
Admin Console also provides the capability to modify and delete existing
proxies, or to create entirely new proxies.
Tip: You can configure advanced properties for most proxies on a per rule basis
using Application Defenses. For information on configuring Application Defenses,
see Chapter 6. For an overview of Application Defenses, see “Application
Defenses” on page 109.
To configure properties for a proxy, start the Admin Console and select
Services Configuration > Proxies. A table appears in the upper portion of the
window, listing the available proxies. (Use the scroll bar to browse the entire list
of proxies.)