I'm very unclear as well why you would want to open up your Internal DNS to the outside world as well. Generally speaking, not something you'd want to do under normal circumstances. That being said, here's what a DNAT should look like: Matching Condition For traffic from: Internet IPv4 Using service: DNS Going to: External (WAN) (ADDRESS) Action Change the destination to: Host definition for your internal server And the service to: leave blank Check the box for automatic firewall rule. Save the DNAT, then toggle the status switch to turn the rule on.
↧