Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to make it so if a user tries to use a different DNS server the request will be redirected to the one they should be using.

Looks like this might work:

ip access-list extended transparent_dns
permit udp any any eq 53

route-map redirect_dns permit 10
match ip address transparent_dns
set ip next-hop ip.of.your.server
route-map redirect_dns permit 20

interface fax/x
ip address
ip policy route-map redirect_dns

I'm assuming this will work on the ASA. Any ideas on another way to do this or if this will even work?

share|improve this question
up vote 2 down vote accepted

The ASA does not support policy based routing. It does however support policy NAT which may allow you to NAT all of your DNS queries to a single DNS server. Another option is to run a WCCP redirect but this requires support from your OS and possibly your DNS server.

share|improve this answer
I see how WCCP can redirect HTTP and HTTPS traffic but I don't see how to set up the DNS side of it, any info on that? Same goes for the policy based NAT. I'll have to look around for some info. Thanks for the ideas. – evolvd Mar 1 '12 at 20:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.