Possible entries are IPv4 and IPv6 IP address Server for the Interface incoming - EQ,10.0.0.1 IP DNS server - EQ,192.168.1.1 address network interface - EQ,www.contoso.com - resolves FQDN of tot rue only the if the query is trying record in to resolve the www.contoso.com the query, FQDN FQDN with the - possibility of EQ,*.contoso.com,*.woodgrove.com using a wild - resolves to true if the query is for card any record ending in contoso.comORwoodgrove.com - EQ,TXT,SRV - resolves tot rue if Type of the query is requesting a TXT OR Query record SRV record Type queried (A, - EQ,MX - resolves tot rue if the SVR, TXT) query is requesting an MX record - EQ,10:00-12:00,22:00-23:00 - Time of day Time of resolves tot rue if the query is the is Day received between 10 AM and noon, received OR between 10PM and 11PM Using the table above as a starting point, the table below could be used to define a criterion that is used to match queries for any type of records but SRV records in the contoso.com domain coming from a client in the 10.0.0.0/24 subnet via TCP between 8 and 10 PM through interface 10.0.0.3: Name Value Client Subnet EQ,10.0.0.0/24 Transport EQ,TCP Protocol Server Interface EQ,10.0.0.3 IP address FQDN EQ,*.contoso.com Query Type NE,SRV Time of Day EQ,20:00-22:00
Possible entries are IPv4 and IPv6 Server Interface IP address IP address for the incoming DNS server network interface - EQ,10.0.0.1 - EQ,192.168.1.1 FQDN FQDN of record in the query, with the possibility of using a wild card - EQ,www.contoso.com - resolves tot rue only the if the query is trying to resolve the www.contoso.com FQDN - EQ,*.contoso.com,*.woodgrove.com - resolves to true if the query is for any record ending in contoso.comORwoodgrove.com Query Type Type of record queried (A, SVR, TXT) - EQ,TXT,SRV - resolves tot rue if the query is requesting a TXT OR SRV record - EQ,MX - resolves tot rue if the query is requesting an MX record Time of Day Time of day the is received - EQ,10:00-12:00,22:00-23:00 - resolves tot rue if the query is received between 10 AM and noon, OR between 10PM and 11PM Using the table above as a starting point, the table below could be used to define a criterion that is used to match queries for any type of records but SRV records in the contoso.com domain coming from a client in the 10.0.0.0/24 subnet via TCP between 8 and 10 PM through interface 10.0.0.3: Name Value Client Subnet EQ,10.0.0.0/24 Transport Protocol EQ,TCP Server Interface IP address EQ,10.0.0.3 FQDN EQ,*.contoso.com Query Type NE,SRV Time of Day EQ,20:00-22:00
DNS-Policy-Scenario-Guide.docx