How does Network >> DNS resolver work?

Thanks guys - using . was what i was looking for.

But i'm still interested in how it works, for example if you don't forward zones how does DNSresolver resolve the names if it's not in the cache (or how does it build it's cache in the first place). Is it supposed to use the local bind installation on F5? because that didn't seem to work (although i had to set it to forward requests to our DNS servers, the F5 device doesn't have internet connectivity for DNS so can't do lookups itself).

@ boneyard - also thanks - i'd been talking to our FSE but didn't think it was worth a support case just yet.

my setup for socks (note i've added forward zone . as Pete suggested):

net dns-resolver DNSrevolver { forward-zones { . { nameservers { 192.168.1.50:domain { } } } } route-domain 0 use-ipv6 no use-tcp no }

ltm profile socks my-socks { app-service none default-connect-handling allow defaults-from socks dns-resolver DNSrevolver protocol-versions { socks4 socks4a socks5 } route-domain 0 tunnel-name socks-tunnel }

ltm virtual my-sock-proxy { description "SOCKS forward proxy" destination 10.0.0.1:socks ip-protocol tcp mask 255.255.255.255 pool ext-router profiles { my-socks { } tcp { } } source 0.0.0.0/0 source-address-translation { type automap } translate-address enabled translate-port enabled vlans { vlan-int } vlans-enabled vs-index 3 }

ltm pool ext-router { description "external router nexthop" members { ext-router:any { address 192.168.1.1 session monitor-enabled state up } } monitor gateway_icmp }

network is simple.

windows-client --> router-internal -->int F5 ext --> router-external --> ssh-server

F5 [internal interface]--> DNS or F5 [mgmt interface] --> DNS

to test SOCKs i used putty client and set SOCKs server as the VS VIP 10.0.0.1:1080. told Putty to resolve DNS on proxy end. the ssh-server has a DNS entry of ssh-server.ourdomain.net. Use that real hostname in putty. It's proxied via F5 and forwarded to ssh-server - F5 should do the resolution of ssh-server.ourdomain.net. The same principle with browser traffic (i just happened to use putty).

Thanks both again.

Kind regards Adrian