topic Re: DNS for remote users in Firewall and Security Management

DNS for remote users

KomisarzRyba — Wed, 30 Oct 2024 10:13:34 GMT

Hello,

I would like a selected group of remote users to query a selected DNS server different than the rest of the remote users. Can this be configured on R81.10?

Re: DNS for remote users

PhoneBoy — Wed, 30 Oct 2024 21:12:42 GMT

Office Mode DNS servers are per-gateway and cannot be specified per-user/group.

Re: DNS for remote users

KomisarzRyba — Fri, 08 Nov 2024 11:22:48 GMT

What about https://support.checkpoint.com/results/sk/sk33422

Or exemple from file:

#
# file: ipassignment.conf
#
# This file is used to implement the IP-per-user feature. It allows the
# administrator to assign specific addresses to specific users or specific
# ranges to specific groups when they connect using Office Mode or L2TP.
#
# The format of this file is simple: Each line specifies the target
# gateway, the IP address (or addresses) we wish to assign and the user
# (or group) name as in the following examples:
#
# Gateway Type IP Address User Name
# ============= ===== ======================================== =========================================
# Paris-GW, 10.5.5.8, Jean
# Brasilia, addr 10.6.5.8, wins=(192.168.3.2,192.168.3.3) Joao # comments are allowed
# Miami, addr 10.7.5.8, dns=(192.168.3.7,192.168.3.8) CN=John,OU=users,O=cpmgmt.acme.com.gibeuu
# 10.1.1.2 range 100.107.105.110-100.107.105.119/24 Finance
# * net 10.7.5.32/28 suffix=(acct.acme.com) Accounting

Re: DNS for remote users

the_rock — Fri, 08 Nov 2024 14:48:39 GMT

I never tested it myself, but thats exactly what TAC suggested to customer once and it did actually work for them.

Andy

Re: DNS for remote users

PhoneBoy — Fri, 08 Nov 2024 18:31:03 GMT

I stand corrected then. 🙂

Re: DNS for remote users

the_rock — Fri, 08 Nov 2024 18:34:03 GMT

@PhoneBoy