We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

How to Configure a Zone

  • Last updated on

The CloudGen Firewall offers the option to configure master, reverse, and slave zones. When configuring a master or reverse zone, it is important to correctly handle the serial / serial number offset value.

Timestamps are used in the DNS system to synchronize zone transfers. You must be careful when using the CloudGen Firewall as a DNS master in conjunction with a DNS slave server running a non-Barracuda product!

The effective serial number is derived from the firewall's Unix time-stamp. In a mixed setup of a CloudGen based DNS master server and a non-Barracuda DNS slave server, Unix time-stamps are numerically lower than date-based time-stamps (e.g. 2019043000). Therefore, a serial number offset must be added to the Unix-based time-stamp. The result of this addition must be greater than the date-based time-stamp at the moment of activating the zone's data. Only then will a slave DNS server accept a zone transfer from the master.

For converting the current time into a Unix-based time-stamp, you can use a calculator on the Internet, e.g., www.unixtimestamp.com .

Before You Begin
  • Verify that all necessary IP addresses for answering DNS queries are already configured as service IP addresses on the respective incoming interfaces. For more information, see How to Assign Services.
  • Ensure that the serial number offset is high enough.

Option 1: Configure a Master Zone

  1. Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > DNS > DNS-Service.
  2. In the left menu, click Hosted Zones.
  3. Right-click into the window.
  4. From the list, select Add new DNS Zone.
  5. The Add Hosted Zone / Domain window is displayed.
  6. For Hosted Zone Type, select Master.
  7. For Domain Name, enter the name of the domain, e.g., example.com .
    While entering the domain name, the edit field for Primary Master Name Server will be auto-filled and the standard name ns1 will be prepended to your domain name for the name server.
  8. For Description, enter any text that best describes your domain.
  9. TTL (time to live [sec]) is already preset. Change the value if necessary.
  10. For Serial Number Offset, enter the offset only if the serial of your new zone record must be higher than the serial on the slave DNS server.
  11. For the auto-filled edit field Primary Master Name Server you can omit any changes unless necessarily required.
  12. For Responsible Person Email, enter the email address of the person that is responsible for the configured domain.
  13. Select Generate NS Record if you want to have the name server record created automatically for you.
  14. For Zone Transfer, select Yes if you want to allow automatic zone transfers.
  15. For Zone Transfer ACL, enter all IP addresses of slave DNS servers that are allowed to exchange zone data with the master.
  16. Click OK.
  17. Click Send Changes.
  18. Click Activate.
    add_master_zone_window.png

You have now configured a master zone.
master_zone_record.png

Option 2: Configure a Reverse Zone

Configuring a reverse zone requires a master zone that is already configured. If there is no master zone configured yet, start over with Option 1 above.

  1. Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > DNS > DNS-Service.
  2. In the left menu, click Hosted Zones.
  3. Right-click into the window.
  4. From the list, select Add new DNS Zone.
  5. The Add Hosted Zone / Domain window is displayed.
  6. For Hosted Zone Type, select Reverse.
  7. In the edit field Network at the bottom of the window, enter the network address that you are configuring the reverse zone for, e.g., 62.99.0.0/24 .
  8. The edit field for Domain Name will be auto-filled based on the network address.
  9. For Description, enter any text that best describes your domain.
  10. TTL (time to live [sec]) is already preset. Change the value if necessary.
  11. For Serial Number Offset, enter the offset only if the serial of your new zone record must be higher than the serial on the slave DNS server.
  12. For Primary Master Name Server, enter the same name server as for the related master zone, e.g., ns1.example.com .
  13. For Responsible Person Email, enter the email address of the person that is responsible for the configured domain.
  14. For Zone Transfer, select Yes if you want to allow automatic zone transfers.
  15. For Zone Transfer ACL, enter all IP addresses of slave DNS servers that are allowed to exchange zone data with the master.
  16. Click OK.
  17. Click Send Changes.
  18. Click Activate.
    add_reverse_zone_window.png

In the Hosted Zones window, you can now see the record for the reverse zone.

reverse_zone_record2.png

Option 3: Configure a Slave Zone

If your firewall must operate as a slave DNS server for a certain zone hosted on another authoritative master DNS server, create a slave zone to host it on your firewall.

  1. Go to CONFIGURATION > Configuration Tree > Box > Assigned Services > DNS > DNS-Service.
  2. In the left menu, click Hosted Zones.
  3. Right-click into the window.
  4. From the list, select Add new DNS Zone.
  5. The Add Hosted Zone / Domain window is displayed.
  6. For Hosted Zone Type, select Slave.
  7. For Domain Name, enter the domain which you want to create a slave zone for. e.g., example2.com .
  8. For Description, enter any text best describes your domain.
  9. Click + to add the master DNS server that hosts the master zone.
  10. The Add New Key window is displayed.
  11. Enter the IP address for the master DNS server, e.g., 212.86.0.11, where to make the zone transfer from.
  12. Click OK.
  13. Click Send Changes.
  14. Click Activate.
    add_slave_zone_window.png

In the Hosted Zones window, you can now see the record for the slave zone
slave_zone_record2.png

Because a slave zone is managed by its owning master server, no records will be shown on the slave DNS server.
Last updated on