DNS Doctoring and RFC2136

[dmease]

Hi All,

Quick question - Does DNS doctoring only cover DNS replies?  I ask as a recent project has come up and it would be quite handy if the ASA intercepted dynamic updates (RFC2136 opcode 5?) and rewrote the IP before the update arrived at the DNS server.

Any feedback greatly appreciated!

cheers,

Darren

[Jennifer Halim]

Yes, you are right. DNS doctoring only applies to DNS reply when DNS inspection is enabled on the ASA.

Here is the details for your reference:

http://www.cisco.com/en/US/docs/security/asa/asa84/command/reference/i2.html#wp1759149