Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Fortimanager Provider
  3. API Docs
  4. ObjectDnsfilterProfile
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

fortimanager.ObjectDnsfilterProfile

Explore with Pulumi AI

fortimanager logo
fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
fortinetdev/terraform-provider-fortimanager

    Configure DNS domain filter profiles.

    The following variables have sub resource. Avoid using them together, otherwise conflicts and overwrites may occur.

    • dns_translation: fortimanager.ObjectDnsfilterProfileDnstranslation
    • domain_filter: fortimanager.ObjectDnsfilterProfileDomainfilter
    • ftgd_dns: fortimanager.ObjectDnsfilterProfileFtgddns

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as fortimanager from "@pulumi/fortimanager";

const trname = new fortimanager.ObjectDnsfilterProfile("trname", {
    blockAction: "redirect",
    blockBotnet: "disable",
    comment: "terraform-tefv-comment",
    logAllDomain: "disable",
});

    import pulumi
import pulumi_fortimanager as fortimanager

trname = fortimanager.ObjectDnsfilterProfile("trname",
    block_action="redirect",
    block_botnet="disable",
    comment="terraform-tefv-comment",
    log_all_domain="disable")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/fortimanager/fortimanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := fortimanager.NewObjectDnsfilterProfile(ctx, "trname", &fortimanager.ObjectDnsfilterProfileArgs{
			BlockAction:  pulumi.String("redirect"),
			BlockBotnet:  pulumi.String("disable"),
			Comment:      pulumi.String("terraform-tefv-comment"),
			LogAllDomain: pulumi.String("disable"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Fortimanager = Pulumi.Fortimanager;

return await Deployment.RunAsync(() => 
{
    var trname = new Fortimanager.ObjectDnsfilterProfile("trname", new()
    {
        BlockAction = "redirect",
        BlockBotnet = "disable",
        Comment = "terraform-tefv-comment",
        LogAllDomain = "disable",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.fortimanager.ObjectDnsfilterProfile;
import com.pulumi.fortimanager.ObjectDnsfilterProfileArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var trname = new ObjectDnsfilterProfile("trname", ObjectDnsfilterProfileArgs.builder()
            .blockAction("redirect")
            .blockBotnet("disable")
            .comment("terraform-tefv-comment")
            .logAllDomain("disable")
            .build());

    }
}

    resources:
  trname:
    type: fortimanager:ObjectDnsfilterProfile
    properties:
      blockAction: redirect
      blockBotnet: disable
      comment: terraform-tefv-comment
      logAllDomain: disable

    Create ObjectDnsfilterProfile Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ObjectDnsfilterProfile(name: string, args?: ObjectDnsfilterProfileArgs, opts?: CustomResourceOptions);
    @overload
def ObjectDnsfilterProfile(resource_name: str,
                           args: Optional[ObjectDnsfilterProfileArgs] = None,
                           opts: Optional[ResourceOptions] = None)

@overload
def ObjectDnsfilterProfile(resource_name: str,
                           opts: Optional[ResourceOptions] = None,
                           adom: Optional[str] = None,
                           block_action: Optional[str] = None,
                           block_botnet: Optional[str] = None,
                           comment: Optional[str] = None,
                           dns_translations: Optional[Sequence[ObjectDnsfilterProfileDnsTranslationArgs]] = None,
                           domain_filter: Optional[ObjectDnsfilterProfileDomainFilterArgs] = None,
                           dynamic_sort_subtable: Optional[str] = None,
                           external_ip_blocklists: Optional[Sequence[str]] = None,
                           ftgd_dns: Optional[ObjectDnsfilterProfileFtgdDnsArgs] = None,
                           log_all_domain: Optional[str] = None,
                           name: Optional[str] = None,
                           object_dnsfilter_profile_id: Optional[str] = None,
                           redirect_portal: Optional[str] = None,
                           redirect_portal6: Optional[str] = None,
                           safe_search: Optional[str] = None,
                           scopetype: Optional[str] = None,
                           sdns_domain_log: Optional[str] = None,
                           sdns_ftgd_err_log: Optional[str] = None,
                           strip_ech: Optional[str] = None,
                           transparent_dns_databases: Optional[Sequence[str]] = None,
                           youtube_restrict: Optional[str] = None)
    func NewObjectDnsfilterProfile(ctx *Context, name string, args *ObjectDnsfilterProfileArgs, opts ...ResourceOption) (*ObjectDnsfilterProfile, error)
    public ObjectDnsfilterProfile(string name, ObjectDnsfilterProfileArgs? args = null, CustomResourceOptions? opts = null)
    public ObjectDnsfilterProfile(String name, ObjectDnsfilterProfileArgs args)
public ObjectDnsfilterProfile(String name, ObjectDnsfilterProfileArgs args, CustomResourceOptions options)

    type: fortimanager:ObjectDnsfilterProfile
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ObjectDnsfilterProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ObjectDnsfilterProfileArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ObjectDnsfilterProfileArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ObjectDnsfilterProfileArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ObjectDnsfilterProfileArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var objectDnsfilterProfileResource = new Fortimanager.ObjectDnsfilterProfile("objectDnsfilterProfileResource", new()
{
    Adom = "string",
    BlockAction = "string",
    BlockBotnet = "string",
    Comment = "string",
    DnsTranslations = new[]
    {
        new Fortimanager.Inputs.ObjectDnsfilterProfileDnsTranslationArgs
        {
            AddrType = "string",
            Dst = "string",
            Dst6 = "string",
            Id = 0,
            Netmask = "string",
            Prefix = 0,
            Src = "string",
            Src6 = "string",
            Status = "string",
        },
    },
    DomainFilter = new Fortimanager.Inputs.ObjectDnsfilterProfileDomainFilterArgs
    {
        DomainFilterTable = 0,
    },
    DynamicSortSubtable = "string",
    ExternalIpBlocklists = new[]
    {
        "string",
    },
    FtgdDns = new Fortimanager.Inputs.ObjectDnsfilterProfileFtgdDnsArgs
    {
        Filters = new[]
        {
            new Fortimanager.Inputs.ObjectDnsfilterProfileFtgdDnsFilterArgs
            {
                Action = "string",
                Category = "string",
                Id = 0,
                Log = "string",
            },
        },
        Options = new[]
        {
            "string",
        },
    },
    LogAllDomain = "string",
    Name = "string",
    ObjectDnsfilterProfileId = "string",
    RedirectPortal = "string",
    RedirectPortal6 = "string",
    SafeSearch = "string",
    Scopetype = "string",
    SdnsDomainLog = "string",
    SdnsFtgdErrLog = "string",
    StripEch = "string",
    TransparentDnsDatabases = new[]
    {
        "string",
    },
    YoutubeRestrict = "string",
});

    example, err := fortimanager.NewObjectDnsfilterProfile(ctx, "objectDnsfilterProfileResource", &fortimanager.ObjectDnsfilterProfileArgs{
Adom: pulumi.String("string"),
BlockAction: pulumi.String("string"),
BlockBotnet: pulumi.String("string"),
Comment: pulumi.String("string"),
DnsTranslations: .ObjectDnsfilterProfileDnsTranslationTypeArray{
&.ObjectDnsfilterProfileDnsTranslationTypeArgs{
AddrType: pulumi.String("string"),
Dst: pulumi.String("string"),
Dst6: pulumi.String("string"),
Id: pulumi.Float64(0),
Netmask: pulumi.String("string"),
Prefix: pulumi.Float64(0),
Src: pulumi.String("string"),
Src6: pulumi.String("string"),
Status: pulumi.String("string"),
},
},
DomainFilter: &.ObjectDnsfilterProfileDomainFilterTypeArgs{
DomainFilterTable: pulumi.Float64(0),
},
DynamicSortSubtable: pulumi.String("string"),
ExternalIpBlocklists: pulumi.StringArray{
pulumi.String("string"),
},
FtgdDns: &.ObjectDnsfilterProfileFtgdDnsTypeArgs{
Filters: .ObjectDnsfilterProfileFtgdDnsFilterArray{
&.ObjectDnsfilterProfileFtgdDnsFilterArgs{
Action: pulumi.String("string"),
Category: pulumi.String("string"),
Id: pulumi.Float64(0),
Log: pulumi.String("string"),
},
},
Options: pulumi.StringArray{
pulumi.String("string"),
},
},
LogAllDomain: pulumi.String("string"),
Name: pulumi.String("string"),
ObjectDnsfilterProfileId: pulumi.String("string"),
RedirectPortal: pulumi.String("string"),
RedirectPortal6: pulumi.String("string"),
SafeSearch: pulumi.String("string"),
Scopetype: pulumi.String("string"),
SdnsDomainLog: pulumi.String("string"),
SdnsFtgdErrLog: pulumi.String("string"),
StripEch: pulumi.String("string"),
TransparentDnsDatabases: pulumi.StringArray{
pulumi.String("string"),
},
YoutubeRestrict: pulumi.String("string"),
})

    var objectDnsfilterProfileResource = new ObjectDnsfilterProfile("objectDnsfilterProfileResource", ObjectDnsfilterProfileArgs.builder()
    .adom("string")
    .blockAction("string")
    .blockBotnet("string")
    .comment("string")
    .dnsTranslations(ObjectDnsfilterProfileDnsTranslationArgs.builder()
        .addrType("string")
        .dst("string")
        .dst6("string")
        .id(0)
        .netmask("string")
        .prefix(0)
        .src("string")
        .src6("string")
        .status("string")
        .build())
    .domainFilter(ObjectDnsfilterProfileDomainFilterArgs.builder()
        .domainFilterTable(0)
        .build())
    .dynamicSortSubtable("string")
    .externalIpBlocklists("string")
    .ftgdDns(ObjectDnsfilterProfileFtgdDnsArgs.builder()
        .filters(ObjectDnsfilterProfileFtgdDnsFilterArgs.builder()
            .action("string")
            .category("string")
            .id(0)
            .log("string")
            .build())
        .options("string")
        .build())
    .logAllDomain("string")
    .name("string")
    .objectDnsfilterProfileId("string")
    .redirectPortal("string")
    .redirectPortal6("string")
    .safeSearch("string")
    .scopetype("string")
    .sdnsDomainLog("string")
    .sdnsFtgdErrLog("string")
    .stripEch("string")
    .transparentDnsDatabases("string")
    .youtubeRestrict("string")
    .build());

    object_dnsfilter_profile_resource = fortimanager.ObjectDnsfilterProfile("objectDnsfilterProfileResource",
    adom="string",
    block_action="string",
    block_botnet="string",
    comment="string",
    dns_translations=[{
        "addr_type": "string",
        "dst": "string",
        "dst6": "string",
        "id": 0,
        "netmask": "string",
        "prefix": 0,
        "src": "string",
        "src6": "string",
        "status": "string",
    }],
    domain_filter={
        "domain_filter_table": 0,
    },
    dynamic_sort_subtable="string",
    external_ip_blocklists=["string"],
    ftgd_dns={
        "filters": [{
            "action": "string",
            "category": "string",
            "id": 0,
            "log": "string",
        }],
        "options": ["string"],
    },
    log_all_domain="string",
    name="string",
    object_dnsfilter_profile_id="string",
    redirect_portal="string",
    redirect_portal6="string",
    safe_search="string",
    scopetype="string",
    sdns_domain_log="string",
    sdns_ftgd_err_log="string",
    strip_ech="string",
    transparent_dns_databases=["string"],
    youtube_restrict="string")

    const objectDnsfilterProfileResource = new fortimanager.ObjectDnsfilterProfile("objectDnsfilterProfileResource", {
    adom: "string",
    blockAction: "string",
    blockBotnet: "string",
    comment: "string",
    dnsTranslations: [{
        addrType: "string",
        dst: "string",
        dst6: "string",
        id: 0,
        netmask: "string",
        prefix: 0,
        src: "string",
        src6: "string",
        status: "string",
    }],
    domainFilter: {
        domainFilterTable: 0,
    },
    dynamicSortSubtable: "string",
    externalIpBlocklists: ["string"],
    ftgdDns: {
        filters: [{
            action: "string",
            category: "string",
            id: 0,
            log: "string",
        }],
        options: ["string"],
    },
    logAllDomain: "string",
    name: "string",
    objectDnsfilterProfileId: "string",
    redirectPortal: "string",
    redirectPortal6: "string",
    safeSearch: "string",
    scopetype: "string",
    sdnsDomainLog: "string",
    sdnsFtgdErrLog: "string",
    stripEch: "string",
    transparentDnsDatabases: ["string"],
    youtubeRestrict: "string",
});

    type: fortimanager:ObjectDnsfilterProfile
properties:
    adom: string
    blockAction: string
    blockBotnet: string
    comment: string
    dnsTranslations:
        - addrType: string
          dst: string
          dst6: string
          id: 0
          netmask: string
          prefix: 0
          src: string
          src6: string
          status: string
    domainFilter:
        domainFilterTable: 0
    dynamicSortSubtable: string
    externalIpBlocklists:
        - string
    ftgdDns:
        filters:
            - action: string
              category: string
              id: 0
              log: string
        options:
            - string
    logAllDomain: string
    name: string
    objectDnsfilterProfileId: string
    redirectPortal: string
    redirectPortal6: string
    safeSearch: string
    scopetype: string
    sdnsDomainLog: string
    sdnsFtgdErrLog: string
    stripEch: string
    transparentDnsDatabases:
        - string
    youtubeRestrict: string

    ObjectDnsfilterProfile Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ObjectDnsfilterProfile resource accepts the following input properties:

    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    BlockAction string
    Action to take for blocked domains. Valid values: block, redirect.
    BlockBotnet string
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    Comment string
    Comment.
    DnsTranslations List<ObjectDnsfilterProfileDnsTranslation>
    Dns-Translation. The structure of dns_translation block is documented below.
    DomainFilter ObjectDnsfilterProfileDomainFilter
    Domain-Filter. The structure of domain_filter block is documented below.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    ExternalIpBlocklists List<string>
    One or more external IP block lists.
    FtgdDns ObjectDnsfilterProfileFtgdDns
    Ftgd-Dns. The structure of ftgd_dns block is documented below.
    LogAllDomain string
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: disable, enable.
    Name string
    Profile name.
    ObjectDnsfilterProfileId string
    an identifier for the resource with format {{name}}.
    RedirectPortal string
    IPv4 address of the SDNS redirect portal.
    RedirectPortal6 string
    IPv6 address of the SDNS redirect portal.
    SafeSearch string
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SdnsDomainLog string
    Enable/disable domain filtering and botnet domain logging. Valid values: disable, enable.
    SdnsFtgdErrLog string
    Enable/disable FortiGuard SDNS rating error logging. Valid values: disable, enable.
    StripEch string
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    TransparentDnsDatabases List<string>
    Transparent DNS database zones.
    YoutubeRestrict string
    Set safe search for YouTube restriction level. Valid values: strict, moderate.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    BlockAction string
    Action to take for blocked domains. Valid values: block, redirect.
    BlockBotnet string
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    Comment string
    Comment.
    DnsTranslations []ObjectDnsfilterProfileDnsTranslationTypeArgs
    Dns-Translation. The structure of dns_translation block is documented below.
    DomainFilter ObjectDnsfilterProfileDomainFilterTypeArgs
    Domain-Filter. The structure of domain_filter block is documented below.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    ExternalIpBlocklists []string
    One or more external IP block lists.
    FtgdDns ObjectDnsfilterProfileFtgdDnsTypeArgs
    Ftgd-Dns. The structure of ftgd_dns block is documented below.
    LogAllDomain string
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: disable, enable.
    Name string
    Profile name.
    ObjectDnsfilterProfileId string
    an identifier for the resource with format {{name}}.
    RedirectPortal string
    IPv4 address of the SDNS redirect portal.
    RedirectPortal6 string
    IPv6 address of the SDNS redirect portal.
    SafeSearch string
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SdnsDomainLog string
    Enable/disable domain filtering and botnet domain logging. Valid values: disable, enable.
    SdnsFtgdErrLog string
    Enable/disable FortiGuard SDNS rating error logging. Valid values: disable, enable.
    StripEch string
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    TransparentDnsDatabases []string
    Transparent DNS database zones.
    YoutubeRestrict string
    Set safe search for YouTube restriction level. Valid values: strict, moderate.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    blockAction String
    Action to take for blocked domains. Valid values: block, redirect.
    blockBotnet String
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment String
    Comment.
    dnsTranslations List<ObjectDnsfilterProfileDnsTranslation>
    Dns-Translation. The structure of dns_translation block is documented below.
    domainFilter ObjectDnsfilterProfileDomainFilter
    Domain-Filter. The structure of domain_filter block is documented below.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    externalIpBlocklists List<String>
    One or more external IP block lists.
    ftgdDns ObjectDnsfilterProfileFtgdDns
    Ftgd-Dns. The structure of ftgd_dns block is documented below.
    logAllDomain String
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: disable, enable.
    name String
    Profile name.
    objectDnsfilterProfileId String
    an identifier for the resource with format {{name}}.
    redirectPortal String
    IPv4 address of the SDNS redirect portal.
    redirectPortal6 String
    IPv6 address of the SDNS redirect portal.
    safeSearch String
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sdnsDomainLog String
    Enable/disable domain filtering and botnet domain logging. Valid values: disable, enable.
    sdnsFtgdErrLog String
    Enable/disable FortiGuard SDNS rating error logging. Valid values: disable, enable.
    stripEch String
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparentDnsDatabases List<String>
    Transparent DNS database zones.
    youtubeRestrict String
    Set safe search for YouTube restriction level. Valid values: strict, moderate.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    blockAction string
    Action to take for blocked domains. Valid values: block, redirect.
    blockBotnet string
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment string
    Comment.
    dnsTranslations ObjectDnsfilterProfileDnsTranslation[]
    Dns-Translation. The structure of dns_translation block is documented below.
    domainFilter ObjectDnsfilterProfileDomainFilter
    Domain-Filter. The structure of domain_filter block is documented below.
    dynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    externalIpBlocklists string[]
    One or more external IP block lists.
    ftgdDns ObjectDnsfilterProfileFtgdDns
    Ftgd-Dns. The structure of ftgd_dns block is documented below.
    logAllDomain string
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: disable, enable.
    name string
    Profile name.
    objectDnsfilterProfileId string
    an identifier for the resource with format {{name}}.
    redirectPortal string
    IPv4 address of the SDNS redirect portal.
    redirectPortal6 string
    IPv6 address of the SDNS redirect portal.
    safeSearch string
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sdnsDomainLog string
    Enable/disable domain filtering and botnet domain logging. Valid values: disable, enable.
    sdnsFtgdErrLog string
    Enable/disable FortiGuard SDNS rating error logging. Valid values: disable, enable.
    stripEch string
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparentDnsDatabases string[]
    Transparent DNS database zones.
    youtubeRestrict string
    Set safe search for YouTube restriction level. Valid values: strict, moderate.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    block_action str
    Action to take for blocked domains. Valid values: block, redirect.
    block_botnet str
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment str
    Comment.
    dns_translations Sequence[ObjectDnsfilterProfileDnsTranslationArgs]
    Dns-Translation. The structure of dns_translation block is documented below.
    domain_filter ObjectDnsfilterProfileDomainFilterArgs
    Domain-Filter. The structure of domain_filter block is documented below.
    dynamic_sort_subtable str
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    external_ip_blocklists Sequence[str]
    One or more external IP block lists.
    ftgd_dns ObjectDnsfilterProfileFtgdDnsArgs
    Ftgd-Dns. The structure of ftgd_dns block is documented below.
    log_all_domain str
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: disable, enable.
    name str
    Profile name.
    object_dnsfilter_profile_id str
    an identifier for the resource with format {{name}}.
    redirect_portal str
    IPv4 address of the SDNS redirect portal.
    redirect_portal6 str
    IPv6 address of the SDNS redirect portal.
    safe_search str
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sdns_domain_log str
    Enable/disable domain filtering and botnet domain logging. Valid values: disable, enable.
    sdns_ftgd_err_log str
    Enable/disable FortiGuard SDNS rating error logging. Valid values: disable, enable.
    strip_ech str
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparent_dns_databases Sequence[str]
    Transparent DNS database zones.
    youtube_restrict str
    Set safe search for YouTube restriction level. Valid values: strict, moderate.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    blockAction String
    Action to take for blocked domains. Valid values: block, redirect.
    blockBotnet String
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment String
    Comment.
    dnsTranslations List<Property Map>
    Dns-Translation. The structure of dns_translation block is documented below.
    domainFilter Property Map
    Domain-Filter. The structure of domain_filter block is documented below.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    externalIpBlocklists List<String>
    One or more external IP block lists.
    ftgdDns Property Map
    Ftgd-Dns. The structure of ftgd_dns block is documented below.
    logAllDomain String
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: disable, enable.
    name String
    Profile name.
    objectDnsfilterProfileId String
    an identifier for the resource with format {{name}}.
    redirectPortal String
    IPv4 address of the SDNS redirect portal.
    redirectPortal6 String
    IPv6 address of the SDNS redirect portal.
    safeSearch String
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sdnsDomainLog String
    Enable/disable domain filtering and botnet domain logging. Valid values: disable, enable.
    sdnsFtgdErrLog String
    Enable/disable FortiGuard SDNS rating error logging. Valid values: disable, enable.
    stripEch String
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparentDnsDatabases List<String>
    Transparent DNS database zones.
    youtubeRestrict String
    Set safe search for YouTube restriction level. Valid values: strict, moderate.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ObjectDnsfilterProfile resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing ObjectDnsfilterProfile Resource

    Get an existing ObjectDnsfilterProfile resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ObjectDnsfilterProfileState, opts?: CustomResourceOptions): ObjectDnsfilterProfile
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        adom: Optional[str] = None,
        block_action: Optional[str] = None,
        block_botnet: Optional[str] = None,
        comment: Optional[str] = None,
        dns_translations: Optional[Sequence[ObjectDnsfilterProfileDnsTranslationArgs]] = None,
        domain_filter: Optional[ObjectDnsfilterProfileDomainFilterArgs] = None,
        dynamic_sort_subtable: Optional[str] = None,
        external_ip_blocklists: Optional[Sequence[str]] = None,
        ftgd_dns: Optional[ObjectDnsfilterProfileFtgdDnsArgs] = None,
        log_all_domain: Optional[str] = None,
        name: Optional[str] = None,
        object_dnsfilter_profile_id: Optional[str] = None,
        redirect_portal: Optional[str] = None,
        redirect_portal6: Optional[str] = None,
        safe_search: Optional[str] = None,
        scopetype: Optional[str] = None,
        sdns_domain_log: Optional[str] = None,
        sdns_ftgd_err_log: Optional[str] = None,
        strip_ech: Optional[str] = None,
        transparent_dns_databases: Optional[Sequence[str]] = None,
        youtube_restrict: Optional[str] = None) -> ObjectDnsfilterProfile
    func GetObjectDnsfilterProfile(ctx *Context, name string, id IDInput, state *ObjectDnsfilterProfileState, opts ...ResourceOption) (*ObjectDnsfilterProfile, error)
    public static ObjectDnsfilterProfile Get(string name, Input<string> id, ObjectDnsfilterProfileState? state, CustomResourceOptions? opts = null)
    public static ObjectDnsfilterProfile get(String name, Output<String> id, ObjectDnsfilterProfileState state, CustomResourceOptions options)
    resources:  _:    type: fortimanager:ObjectDnsfilterProfile    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    BlockAction string
    Action to take for blocked domains. Valid values: block, redirect.
    BlockBotnet string
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    Comment string
    Comment.
    DnsTranslations List<ObjectDnsfilterProfileDnsTranslation>
    Dns-Translation. The structure of dns_translation block is documented below.
    DomainFilter ObjectDnsfilterProfileDomainFilter
    Domain-Filter. The structure of domain_filter block is documented below.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    ExternalIpBlocklists List<string>
    One or more external IP block lists.
    FtgdDns ObjectDnsfilterProfileFtgdDns
    Ftgd-Dns. The structure of ftgd_dns block is documented below.
    LogAllDomain string
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: disable, enable.
    Name string
    Profile name.
    ObjectDnsfilterProfileId string
    an identifier for the resource with format {{name}}.
    RedirectPortal string
    IPv4 address of the SDNS redirect portal.
    RedirectPortal6 string
    IPv6 address of the SDNS redirect portal.
    SafeSearch string
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SdnsDomainLog string
    Enable/disable domain filtering and botnet domain logging. Valid values: disable, enable.
    SdnsFtgdErrLog string
    Enable/disable FortiGuard SDNS rating error logging. Valid values: disable, enable.
    StripEch string
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    TransparentDnsDatabases List<string>
    Transparent DNS database zones.
    YoutubeRestrict string
    Set safe search for YouTube restriction level. Valid values: strict, moderate.
    Adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    BlockAction string
    Action to take for blocked domains. Valid values: block, redirect.
    BlockBotnet string
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    Comment string
    Comment.
    DnsTranslations []ObjectDnsfilterProfileDnsTranslationTypeArgs
    Dns-Translation. The structure of dns_translation block is documented below.
    DomainFilter ObjectDnsfilterProfileDomainFilterTypeArgs
    Domain-Filter. The structure of domain_filter block is documented below.
    DynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    ExternalIpBlocklists []string
    One or more external IP block lists.
    FtgdDns ObjectDnsfilterProfileFtgdDnsTypeArgs
    Ftgd-Dns. The structure of ftgd_dns block is documented below.
    LogAllDomain string
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: disable, enable.
    Name string
    Profile name.
    ObjectDnsfilterProfileId string
    an identifier for the resource with format {{name}}.
    RedirectPortal string
    IPv4 address of the SDNS redirect portal.
    RedirectPortal6 string
    IPv6 address of the SDNS redirect portal.
    SafeSearch string
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    Scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    SdnsDomainLog string
    Enable/disable domain filtering and botnet domain logging. Valid values: disable, enable.
    SdnsFtgdErrLog string
    Enable/disable FortiGuard SDNS rating error logging. Valid values: disable, enable.
    StripEch string
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    TransparentDnsDatabases []string
    Transparent DNS database zones.
    YoutubeRestrict string
    Set safe search for YouTube restriction level. Valid values: strict, moderate.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    blockAction String
    Action to take for blocked domains. Valid values: block, redirect.
    blockBotnet String
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment String
    Comment.
    dnsTranslations List<ObjectDnsfilterProfileDnsTranslation>
    Dns-Translation. The structure of dns_translation block is documented below.
    domainFilter ObjectDnsfilterProfileDomainFilter
    Domain-Filter. The structure of domain_filter block is documented below.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    externalIpBlocklists List<String>
    One or more external IP block lists.
    ftgdDns ObjectDnsfilterProfileFtgdDns
    Ftgd-Dns. The structure of ftgd_dns block is documented below.
    logAllDomain String
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: disable, enable.
    name String
    Profile name.
    objectDnsfilterProfileId String
    an identifier for the resource with format {{name}}.
    redirectPortal String
    IPv4 address of the SDNS redirect portal.
    redirectPortal6 String
    IPv6 address of the SDNS redirect portal.
    safeSearch String
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sdnsDomainLog String
    Enable/disable domain filtering and botnet domain logging. Valid values: disable, enable.
    sdnsFtgdErrLog String
    Enable/disable FortiGuard SDNS rating error logging. Valid values: disable, enable.
    stripEch String
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparentDnsDatabases List<String>
    Transparent DNS database zones.
    youtubeRestrict String
    Set safe search for YouTube restriction level. Valid values: strict, moderate.
    adom string
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    blockAction string
    Action to take for blocked domains. Valid values: block, redirect.
    blockBotnet string
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment string
    Comment.
    dnsTranslations ObjectDnsfilterProfileDnsTranslation[]
    Dns-Translation. The structure of dns_translation block is documented below.
    domainFilter ObjectDnsfilterProfileDomainFilter
    Domain-Filter. The structure of domain_filter block is documented below.
    dynamicSortSubtable string
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    externalIpBlocklists string[]
    One or more external IP block lists.
    ftgdDns ObjectDnsfilterProfileFtgdDns
    Ftgd-Dns. The structure of ftgd_dns block is documented below.
    logAllDomain string
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: disable, enable.
    name string
    Profile name.
    objectDnsfilterProfileId string
    an identifier for the resource with format {{name}}.
    redirectPortal string
    IPv4 address of the SDNS redirect portal.
    redirectPortal6 string
    IPv6 address of the SDNS redirect portal.
    safeSearch string
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    scopetype string
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sdnsDomainLog string
    Enable/disable domain filtering and botnet domain logging. Valid values: disable, enable.
    sdnsFtgdErrLog string
    Enable/disable FortiGuard SDNS rating error logging. Valid values: disable, enable.
    stripEch string
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparentDnsDatabases string[]
    Transparent DNS database zones.
    youtubeRestrict string
    Set safe search for YouTube restriction level. Valid values: strict, moderate.
    adom str
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    block_action str
    Action to take for blocked domains. Valid values: block, redirect.
    block_botnet str
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment str
    Comment.
    dns_translations Sequence[ObjectDnsfilterProfileDnsTranslationArgs]
    Dns-Translation. The structure of dns_translation block is documented below.
    domain_filter ObjectDnsfilterProfileDomainFilterArgs
    Domain-Filter. The structure of domain_filter block is documented below.
    dynamic_sort_subtable str
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    external_ip_blocklists Sequence[str]
    One or more external IP block lists.
    ftgd_dns ObjectDnsfilterProfileFtgdDnsArgs
    Ftgd-Dns. The structure of ftgd_dns block is documented below.
    log_all_domain str
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: disable, enable.
    name str
    Profile name.
    object_dnsfilter_profile_id str
    an identifier for the resource with format {{name}}.
    redirect_portal str
    IPv4 address of the SDNS redirect portal.
    redirect_portal6 str
    IPv6 address of the SDNS redirect portal.
    safe_search str
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    scopetype str
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sdns_domain_log str
    Enable/disable domain filtering and botnet domain logging. Valid values: disable, enable.
    sdns_ftgd_err_log str
    Enable/disable FortiGuard SDNS rating error logging. Valid values: disable, enable.
    strip_ech str
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparent_dns_databases Sequence[str]
    Transparent DNS database zones.
    youtube_restrict str
    Set safe search for YouTube restriction level. Valid values: strict, moderate.
    adom String
    Adom. This value is valid only when the scopetype is adom, otherwise the value of adom in the provider will be inherited.
    blockAction String
    Action to take for blocked domains. Valid values: block, redirect.
    blockBotnet String
    Enable/disable blocking botnet C&C DNS lookups. Valid values: disable, enable.
    comment String
    Comment.
    dnsTranslations List<Property Map>
    Dns-Translation. The structure of dns_translation block is documented below.
    domainFilter Property Map
    Domain-Filter. The structure of domain_filter block is documented below.
    dynamicSortSubtable String
    true or false, set this parameter to true when using dynamic for_each + toset to configure and sort sub-tables, please do not set this parameter when configuring static sub-tables.
    externalIpBlocklists List<String>
    One or more external IP block lists.
    ftgdDns Property Map
    Ftgd-Dns. The structure of ftgd_dns block is documented below.
    logAllDomain String
    Enable/disable logging of all domains visited (detailed DNS logging). Valid values: disable, enable.
    name String
    Profile name.
    objectDnsfilterProfileId String
    an identifier for the resource with format {{name}}.
    redirectPortal String
    IPv4 address of the SDNS redirect portal.
    redirectPortal6 String
    IPv6 address of the SDNS redirect portal.
    safeSearch String
    Enable/disable Google, Bing, and YouTube safe search. Valid values: disable, enable.
    scopetype String
    The scope of application of the resource. Valid values: inherit, adom, global. The inherit means that the scopetype of the provider will be inherited, and adom will also be inherited. The default value is inherit.
    sdnsDomainLog String
    Enable/disable domain filtering and botnet domain logging. Valid values: disable, enable.
    sdnsFtgdErrLog String
    Enable/disable FortiGuard SDNS rating error logging. Valid values: disable, enable.
    stripEch String
    Enable/disable removal of the encrypted client hello service parameter from supporting DNS RRs. Valid values: disable, enable.
    transparentDnsDatabases List<String>
    Transparent DNS database zones.
    youtubeRestrict String
    Set safe search for YouTube restriction level. Valid values: strict, moderate.

    Supporting Types

    ObjectDnsfilterProfileDnsTranslation, ObjectDnsfilterProfileDnsTranslationArgs

    AddrType string
    DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
    Dst string
    IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
    Dst6 string
    IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
    Id double
    ID.
    Netmask string
    If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
    Prefix double
    If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
    Src string
    IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
    Src6 string
    IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
    Status string
    Enable/disable this DNS translation entry. Valid values: disable, enable.
    AddrType string
    DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
    Dst string
    IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
    Dst6 string
    IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
    Id float64
    ID.
    Netmask string
    If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
    Prefix float64
    If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
    Src string
    IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
    Src6 string
    IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
    Status string
    Enable/disable this DNS translation entry. Valid values: disable, enable.
    addrType String
    DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
    dst String
    IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
    dst6 String
    IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
    id Double
    ID.
    netmask String
    If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
    prefix Double
    If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
    src String
    IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
    src6 String
    IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
    status String
    Enable/disable this DNS translation entry. Valid values: disable, enable.
    addrType string
    DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
    dst string
    IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
    dst6 string
    IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
    id number
    ID.
    netmask string
    If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
    prefix number
    If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
    src string
    IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
    src6 string
    IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
    status string
    Enable/disable this DNS translation entry. Valid values: disable, enable.
    addr_type str
    DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
    dst str
    IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
    dst6 str
    IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
    id float
    ID.
    netmask str
    If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
    prefix float
    If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
    src str
    IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
    src6 str
    IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
    status str
    Enable/disable this DNS translation entry. Valid values: disable, enable.
    addrType String
    DNS translation type (IPv4 or IPv6). Valid values: ipv4, ipv6.
    dst String
    IPv4 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src.
    dst6 String
    IPv6 address or subnet on the external network to substitute for the resolved address in DNS query replies. Can be single IP address or subnet on the external network, but number of addresses must equal number of mapped IP addresses in src6.
    id Number
    ID.
    netmask String
    If src and dst are subnets rather than single IP addresses, enter the netmask for both src and dst.
    prefix Number
    If src6 and dst6 are subnets rather than single IP addresses, enter the prefix for both src6 and dst6 (1 - 128, default = 128).
    src String
    IPv4 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst.
    src6 String
    IPv6 address or subnet on the internal network to compare with the resolved address in DNS query replies. If the resolved address matches, the resolved address is substituted with dst6.
    status String
    Enable/disable this DNS translation entry. Valid values: disable, enable.

    ObjectDnsfilterProfileDomainFilter, ObjectDnsfilterProfileDomainFilterArgs

    DomainFilterTable double
    DNS domain filter table ID.
    DomainFilterTable float64
    DNS domain filter table ID.
    domainFilterTable Double
    DNS domain filter table ID.
    domainFilterTable number
    DNS domain filter table ID.
    domain_filter_table float
    DNS domain filter table ID.
    domainFilterTable Number
    DNS domain filter table ID.

    ObjectDnsfilterProfileFtgdDns, ObjectDnsfilterProfileFtgdDnsArgs

    Filters List<ObjectDnsfilterProfileFtgdDnsFilter>
    Filters. The structure of filters block is documented below.
    Options List<string>
    FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
    Filters []ObjectDnsfilterProfileFtgdDnsFilter
    Filters. The structure of filters block is documented below.
    Options []string
    FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
    filters List<ObjectDnsfilterProfileFtgdDnsFilter>
    Filters. The structure of filters block is documented below.
    options List<String>
    FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
    filters ObjectDnsfilterProfileFtgdDnsFilter[]
    Filters. The structure of filters block is documented below.
    options string[]
    FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
    filters Sequence[ObjectDnsfilterProfileFtgdDnsFilter]
    Filters. The structure of filters block is documented below.
    options Sequence[str]
    FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.
    filters List<Property Map>
    Filters. The structure of filters block is documented below.
    options List<String>
    FortiGuard DNS filter options. Valid values: error-allow, ftgd-disable.

    ObjectDnsfilterProfileFtgdDnsFilter, ObjectDnsfilterProfileFtgdDnsFilterArgs

    Action string
    Action to take for DNS requests matching the category. Valid values: monitor, block.
    Category string
    Category number.
    Id double
    ID number.
    Log string
    Enable/disable DNS filter logging for this DNS profile. Valid values: disable, enable.
    Action string
    Action to take for DNS requests matching the category. Valid values: monitor, block.
    Category string
    Category number.
    Id float64
    ID number.
    Log string
    Enable/disable DNS filter logging for this DNS profile. Valid values: disable, enable.
    action String
    Action to take for DNS requests matching the category. Valid values: monitor, block.
    category String
    Category number.
    id Double
    ID number.
    log String
    Enable/disable DNS filter logging for this DNS profile. Valid values: disable, enable.
    action string
    Action to take for DNS requests matching the category. Valid values: monitor, block.
    category string
    Category number.
    id number
    ID number.
    log string
    Enable/disable DNS filter logging for this DNS profile. Valid values: disable, enable.
    action str
    Action to take for DNS requests matching the category. Valid values: monitor, block.
    category str
    Category number.
    id float
    ID number.
    log str
    Enable/disable DNS filter logging for this DNS profile. Valid values: disable, enable.
    action String
    Action to take for DNS requests matching the category. Valid values: monitor, block.
    category String
    Category number.
    id Number
    ID number.
    log String
    Enable/disable DNS filter logging for this DNS profile. Valid values: disable, enable.

    Import

    ObjectDnsfilter Profile can be imported using any of these accepted formats:

    $ export “FORTIMANAGER_IMPORT_TABLE”=“true”

    $ pulumi import fortimanager:index/objectDnsfilterProfile:ObjectDnsfilterProfile labelname {{name}}

    $ unset “FORTIMANAGER_IMPORT_TABLE”

    -> Hint: The scopetype and adom for import will directly inherit the scopetype and adom configuration of the provider.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    fortimanager fortinetdev/terraform-provider-fortimanager
    License
    Notes
    This Pulumi package is based on the fortimanager Terraform Provider.
    fortimanager logo
    fortimanager 1.13.0 published on Thursday, Mar 13, 2025 by fortinetdev
    fortinetdev/terraform-provider-fortimanager