Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document.
Note: Even the most advanced machine translation cannot match the quality of professional translators.
Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
(Optional) Configuring DNS Spoofing
Context
If the device is enabled with DNS proxy or relay but is not configured with a DNS server address or has no route to the DNS server, the device does not forward or respond to DNS query messages from DNS clients. After DNS Spoofing is enabled, the device uses the configured IP address to respond to all DNS query messages.
In addition to enabling DNS proxy or relay, one of the following
requirements must be met to make DNS Spoofing take effect:
- No DNS server is configured.
- A DNS server is configured, but dynamic DNS resolution is disabled.
- No route is reachable to the DNS server.
- No source IP address is available for the outbound interface connected to the DNS server.
If one of the preceding requirements is met, when receiving an address record query, the DNS proxy or relay return Spoofing reply messages using the configured IP address.