# DNS answer translations

DNS answer translations guarantee that DNS replies for users in internal networks always contain internal IP addresses even if a public DNS server returns an external IP address for the same domain.

DNS answer translations map IPv4 addresses resolved by external DNS servers to IPv4 addresses in the internal network. When an IPv4 address in a DNS result matches one of the specified DNS answer translations, the firewall modifies the DNS result so that users in internal networks receive the internal IP address.

You define DNS answer translations in DNS Relay Profile elements as pairs of original IPv4 addresses and translated IPv4 addresses in the DNS Answer Translations section of DNS Relay Profile elements.