ZyXEL Communications USG40 User Manual page 832

Table 349 Configuration > System > DNS (continued)
LABEL DESCRIPTION
Domain Zone A domain zone is a fully qualified domain name without the host. For example,
zyxel.com.tw is the domain zone for the www.zyxel.com.tw fully qualified domain name.
A "*" means all domain zones.
Type This displays whether the DNS server IP address is assigned by the ISP dynamically
through a specified interface or configured manually (User-Defined).
DNS Server This is the IP address of a DNS server. This field displays N/A if you have the ZyWALL/
USG get a DNS server IP address from the ISP dynamically but the specified interface is
not active.
Query Via This is the interface through which the ZyWALL/USG sends DNS queries to the entry's
DNS server. If the ZyWALL/USG connects through a VPN tunnel, tunnel displays.
MX Record (for My A MX (Mail eXchange) record identifies a mail server that handles the mail for a
FQDN) particular domain.
Add Click this to create a new entry.
Edit Double-click an entry or select it and click Edit to be able to modify the entry's settings.
Remove To remove an entry, select it and click Remove. The ZyWALL/USG confirms you want to
remove it before doing so. Note that subsequent entries move up by one when you take
this action.
# This is the index number of the MX record.
Domain Name This is the domain name where the mail is destined for.
IP/FQDN This is the IP address or Fully-Qualified Domain Name (FQDN) of a mail server that
handles the mail for the domain specified in the field above.
Security Option Click Show Advanced Settings to display this part of the screen. There are two control
Control policies: Default and Customize.
Edit Click either control policy and then click this button to change allow or deny actions for
Query Recursion and Additional Info from Cache.
Priority The Customize control policy is checked first and if an address object match is not
found, the Default control policy is checked.
Name You may change the name of the Customize control policy.
Address These are the object addresses used in the control policy. RFC1918 refers to private IP
address ranges. It can be modified in Object > Address.
Additional Info This displays if the ZyWALL/USG is allowed or denied to cache Resource Records (RR)
from Cache
obtained from previous DNS queries.
Query This displays if the ZyWALL/USG is allowed or denied to forward DNS client requests to
Recursion
DNS servers for resolution.
Service Control This specifies from which computers and zones you can send DNS queries to the
ZyWALL/USG.
Add Click this to create a new entry. Select an entry and click Add to create a new entry after
the selected entry.
Edit Double-click an entry or select it and click Edit to be able to modify the entry's settings.
Remove To remove an entry, select it and click Remove. The ZyWALL/USG confirms you want to
remove it before doing so. Note that subsequent entries move up by one when you take
this action.
Move To change an entry's position in the numbered list, select the method and click Move to
display a field to type a number for where you want to put it and press [ENTER] to move
the rule to the number that you typed.
Chapter 43 System
ZyWALL/USG Series User's Guide
832