FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
hbac
Staff
Staff
Article Id 295898
Description This article describes how to configure reverse lookup (pointer record) when using FortiGate as a DNS server. 
Scope FortiGate.
Solution

To be able to do reverse DNS lookup when using FortiGate as a DNS server, it is necessary to create PTR entries under Network -> DNS Servers -> DNS Database -> DNS Entries. In the below example, internal computers send DNS queries to port4 of the FortiGate. 

 

DNS.PNG

 

An example of PTR entry. 

 

PTR.PNG

 

With the above configuration, computers with port4 IP address as DNS server should be able to perform reverse lookup as follows:

 

nslookup.PNG

 

To configure in the CLI: 

 

config system dns-database
    edit "local"
        config dns-entry
            edit 1
                set type PTR
                set hostname "test"
                set ip 10.10.10.10
            next

        end

 

Related article:

Technical Tip: DNS conditional forwarding

Contributors