Specifications

This IP rule also specifies that the action for DNS requests is NAT so all DNS request traffic is sent
out by CorePlus with the outgoing interface's IP address as the source IP.
For the Internet connection to work, we also need a route defined so that CorePlus knows on
which interface the web browsing traffic should leave the Clavister Security Gateway. This route
will define the interface where the network all-nets (in other words, any network) will be found. If
we open the default main routing table by going to Routing > Routing Tables > Main in the
navigation tree, the route needed should appear as below.
This required all-nets route is, in fact, added automatically after specifying the Default Gateway
for a particular Ethernet interface which we did earlier after setting up the required IP4 Address
objects.
Note: Disabling automatic route generation
Automatic route generation is enabled and disabled with the setting "Automatically
add a default route for this interface using the given default gateway" which can
be found in the properties of the interface.
As part of the setup, it is also recommended that at least one DNS server is also defined in
CorePlus. This DSN server or servers (a maximum of three can be configured) will be used when
CorePlus itself needs to resolve URLs which is the case when a URL is specified in a configuration
instead of an IP address. Let's assume an IP address object called wan_dns1 has already been
defined in the address book which is the IP address for the first DNS server. By choosing System
> DNS in the navigation tree, the DNS server dialog will open and this object from the address
book can be assigned as the first server.
Chapter 3: CorePlus Configuration
38