DNS Internal NAT

General questions
,
7

Hello @phasma,
Sorry for the wait.
For example, the working configuration from the network laboratory:

set firewall group address-group DNS address '172.16.0.250'
set firewall group address-group DNS address '172.16.0.251'
set interfaces ethernet eth0 address 'dhcp'
set interfaces ethernet eth1 address '172.16.0.1/24'
set nat destination rule 100 destination port 'domain'
set nat destination rule 100 inbound-interface 'eth1'
set nat destination rule 100 log
set nat destination rule 100 protocol 'tcp_udp'
set nat destination rule 100 source group address-group '!DNS'
set nat destination rule 100 translation address '172.16.0.250'
set nat destination rule 100 translation port 'domain'
set nat source rule 100 outbound-interface 'eth0'
set nat source rule 100 translation address 'masquerade'

All internal requests to port 53 are translation to IP 172.16.0.250
Firewall is not used!