Address Record - ZyXEL Communications ZyWall USG20-VPN User Manual

Table 234 Configuration > System > DNS (continued)
LABEL
Remove
#
Domain Name
IP/FQDN
Security Option
Control
Edit
Priority
Name
Address
Additional Info
from Cache
Query
Recursion
Service Control
Add
Edit
Remove
Move
#
Zone
Address
Action

30.6.3 Address Record

An address record contains the mapping of a Fully-Qualified Domain Name (FQDN) to an IP
address. An FQDN consists of a host and domain name. For example, www.zyxel.com is a fully
qualified domain name, where "www" is the host, "zyxel" is the second-level domain, and "com" is
the top level domain. mail.myZyXEL.com.tw is also a FQDN, where "mail" is the host, "myZyXEL" is
the third-level domain, "com" is the second-level domain, and "tw" is the top level domain.
Chapter 30 System
DESCRIPTION
To remove an entry, select it and click Remove. The USG confirms you want to remove it
before doing so. Note that subsequent entries move up by one when you take this action.
This is the index number of the MX record.
This is the domain name where the mail is destined for.
This is the IP address or Fully-Qualified Domain Name (FQDN) of a mail server that
handles the mail for the domain specified in the field above.
Click Show Advanced Settings to display this part of the screen. There are two control
policies: Default and Customize.
Click either control policy and then click this button to change allow or deny actions for
Query Recursion and Additional Info from Cache.
The Customize control policy is checked first and if an address object match is not
found, the Default control policy is checked.
You may change the name of the Customize control policy.
These are the object addresses used in the control policy. RFC1918 refers to private IP
address ranges. It can be modified in Object > Address.
This displays if the USG is allowed or denied to cache Resource Records (RR) obtained
from previous DNS queries.
This displays if the USG is allowed or denied to forward DNS client requests to DNS
servers for resolution.
This specifies from which computers and zones you can send DNS queries to the USG.
Click this to create a new entry. Select an entry and click Add to create a new entry after
the selected entry.
Double-click an entry or select it and click Edit to be able to modify the entry's settings.
To remove an entry, select it and click Remove. The USG confirms you want to remove it
before doing so. Note that subsequent entries move up by one when you take this action.
To change an entry's position in the numbered list, select the method and click Move to
display a field to type a number for where you want to put it and press [ENTER] to move
the rule to the number that you typed.
This the index number of the service control rule. The ordering of your rules is important
as rules are applied in sequence.
The entry with a hyphen (-) instead of a number is the USG's (non-configurable) default
policy. The USG applies this to traffic that does not match any other configured rule. It is
not an editable rule. To apply other behavior, configure a rule that traffic will match so
the USG will not have to use the default policy.
This is the zone on the USG the user is allowed or denied to access.
This is the object name of the IP address(es) with which the computer is allowed or
denied to send DNS queries.
This displays whether the USG accepts DNS queries from the computer with the IP
address specified above through the specified zone (Accept) or discards them (Deny).
USG20(W)-VPN Series User's Guide
548