Tom is testing: Overriding DNS responses

One of my clients asked me yesterday how to override DNS responses. This turned out to be quite easy… but only if you know how to do it 😀

Prerequisite:
You need to make sure that DNS traffic reaches Zscaler. This means that your DNS server cannot be a private IP address. Set it to e.g. 8.8.8.8.

Step 1

Create a new URL category with your FQDN. In my case i created the category ‘gazeta‘ which includes the fqdn gazeta.pl

Step 2
Create a DNS control policy with Request Category: <your new category> and Redirect Response field set to <IP address you want to set instead of the normal returned IP>

Here I’m changing the returned IP to 4.3.2.1

Step 3
Activate the change.

Step 4
Verify it’s working as required:

Interestingly enough, I was still able to open the website because in this logic, gazeta.pl is not enough. You need to have http://www.gazeta.pl as well or the logic will not apply.