How to Make DNS NAT - im trying and all fail :(

If you would draw a picture for us, maybe we can help you. 

Do something like: Client - XG - Server (Internet) 

What should happen with the traffic? Because i cannot follow your request. 

updated

I am not sure, if this will really work. Did it work with your old solution and NAT? Because this looks like breaking the routing completely. 

its just an attempt to see if its going to work. Why im even asking about NAT for particular scenario ? Well i was trying to setup a DNS NAT but no luck at all so maybe i didint understand sth as Sophos implemented on GUI ;)

Hi LuCar Toni,

what he is trying to do is have all DNS requests that appear on the XG internal interfaces are redirected to his own internal DNS.

Ian

Sure thats tru, but for that scenario ive created a separated topic ;)

In this case im trying to achive if ipcamAPP which is requesting  to public ip -> this request NAT to local IP of an IPCam

So i wrote on diagram

IPCAM ->NAT -> LOCALIP CAM. To see if i can bypass public ip server of IPcam vendor. I hope this is explained correctly ^^

Im refering to this yt video:
https://www.youtube.com/watch?v=tohFRoJbsIM

so if this would work with DNS why it shouldnt with  some other services ;)

I use the following DNAT to redirect all internal DNS traffic to the XG Firewall which is set up as a DNS server.  It works very well.  To prevent DNS access to the WAN, my other NAT & firewall rules do not permit any DNS access to the WAN.  That way only the DNS servers I specify are used.

In the sample below, you can simply change the Translated destination (DNAT) to the IP you want to act as your DNS server.

I'll check it right away ! If im good remember i have been doing it like you have and it didint work, ill check again

So now my rules looks this:

NAT:

FW rule accessing local DNS:

Im using DoH and DNSoverTLS

So i did some testing like:

i have set a static DNS ips on a laptop and im trying to reach some web pages - unfortunately "cant find page"

as i understand the requests should be translated to my local dns so i shloud be able to browser internet, but im not ;)

Wireshark results of an query

maybe there is sth messed-up in NAT rule. I wanna admit that MY DNS server isnt in the same LAN - its on the separeted interface plugged to XG, different subnet ;)

So i did some testing like:

i have set a static DNS ips on a laptop and im trying to reach some web pages - unfortunately "cant find page"

as i understand the requests should be translated to my local dns so i shloud be able to browser internet, but im not ;)

Wireshark results of an query

maybe there is sth messed-up in NAT rule. I wanna admit that MY DNS server isnt in the same LAN - its on the separeted interface plugged to XG, different subnet ;)