Network > Address Objects
311
SonicOS 5.8.1 Administrator Guide
Step 1 – Create the FQDN Address Object
• From Network > Address Objects, select Add and create the following Address Object:
• When first created, this entry will resolve only to the address for dyndns.org, e.g.
63.208.196.110.
Step 2 – Create the Firewall Access Rule
• From the Firewall > Access Rules page, LAN->WAN zone intersection, Add an Access
Rule as follows:
Note Rather than specifying ‘LAN Subnets’ as the source, a more specific source could be
specified, as appropriate, so that only certain hosts are denied access to the targets.
• When a host behind the firewall attempts to resolve moosifer.dyndns.org using a
sanctioned DNS server, the IP address(es) returned in the query response will be
dynamically added to the FQDN AO.
• Any protocol access to target hosts within that FQDN will be blocked, and the access
attempt will be logged:
