Configuration

Settings for the application-based routing or the Layer%#160;7 application control are located under Firewall/QoS > General > Application Routing / Layer 7 Application Control.





DNS-Destinations

In LANconfig, you specify the names and wildcard expressions for the DNS destinations that you want to treat separately in the firewall under Firewall/QoS > General > Application-based routing > DNS destinations.





Name
The name for this DNS destination. This name is used to reference this object.
Wildcard expressions
Contains a comma-separated or space-separated list of wildcard expressions. The expressions can contain any number of ? (any character) and * (several arbitrary characters), e.g. "*.lancom.*". The input is limited to 252 characters. If you need more DNS wildcard expressions for a service, then you can group multiple DNS destinations into one referenced object in the DNS destinations list. Unicode characters for internationalized domain names can be entered as follows:
  • UTF-8: Here, one to four bytes must be entered individually as '\x' followed by two hexadecimal digits.
  • UTF-16: Here, one or two double bytes must be entered as '\u' followed by four hexadecimal digits.
  • UTF-32: Here, the value must be entered as '\U' followed by eight hexadecimal digits.

DNS destination list

In LANconfig, specify the DNS destinations that you want to reference as one object in the firewall under Firewall/QoS > General > Application-based routing > DNS destinations list.





Name
Name of the list of DNS destinations
Targets
Contains a comma-separated or space-separated list of names of the DNS destinations.

Referencing in firewall rules

In Firewall / Qos > IPv4-Rules > Rules you can create a new filter rule and, then, go to the Stations tab and select from the configured DNS destinations under Connections to the following DNS destinations.





In Firewall / Qos > IPv6 Rules > IPv6 forwarding rulesyou can create a new rule. Entries from the DNS destinations or DNS destination list tables can be used as Target stations.





www.lancom-systems.com

LANCOM Systems GmbH | Adenauerstr. 20/B2 | 52146 Wuerselen | Germany | E-Mail info@lancom.de

LANCOM Logo