Description

This document provides firewall filter configuration required to match DNS traffic.

Solution

Configure Firewall Filter:

 

set firewall family inet filter DNS-Trace term match-dns from protocol udp

set firewall family inet filter DNS-Trace term match-dns from destination-port 53

set firewall family inet filter DNS-Trace term match-dns then log

set firewall family inet filter DNS-Trace term match-dns then count

set firewall family inet filter DNS-Trace term default then accept 

 

Apply firewall filter on interface:

 

set interfaces xe-1/0/0.1 family inet filter input DNS-Trace

 

Verify logs:

 

show firewall log

show firewall filter DNS-Trace



 
Modification History
2024-11-29 : Article Created