Configuring DNS spoofing

• You can configure only one replied IPv4 address and one replied IPv6 address for the public network or a VPN instance. If you execute the command multiple times, the most recent configuration takes effect.

• You can configure DNS spoofing for both public network and VPN instances.

• After DNS spoofing takes effect, the device spoofs a DNS request even though a matching static DNS entry exists.

The DNS proxy is enabled on the device.

No DNS server or route to any DNS server is specified on the device.

1. Enter system view.

   system-view

2. Enable DNS proxy.

   dns proxy enable

   By default, DNS proxy is disabled.

3. Enable DNS spoofing and specify the IP address used to spoof DNS requests. Choose one option as needed:

   IPv4:

   dns spoofing ip-address [ vpn-instance vpn-instance-name ]

   IPv6:

   ipv6 dns spoofing ipv6-address [ vpn-instance vpn-instance-name ]

   By default, DNS spoofing is disabled.