Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 0 replies
  • Subscribers 6 subscribers
  • Views 2182 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNS requests failing

greekgit

My internal DNS server is logging format errors from the SophosAV on my MacMini. Examples below :_

02-Feb-201306:02:37resolverDNS format error from 10.200.0.2#53 resolving e2e4ff136df800d7932f49b2dbb34dfbf6d5359b.p.00.mac.sophosxl.net/TXT for client 10.200.0.114#61709: question section mismatch: got 0.0.0.0.in-addr.arpa/IN/PTR

02-Feb-201306:02:37resolverDNS format error from 10.200.0.2#53 resolving e2e4ff136df800d7932f49b2dbb34dfbf6d5359b.p.01.mac.sophosxl.net/TXT for client 10.200.0.114#61709: question section mismatch: got 0.0.0.0.in-addr.arpa/IN/PTR

02-Feb-201306:02:37resolverDNS format error from 10.200.0.2#53 resolving e2e4ff136df800d7932f49b2dbb34dfbf6d5359b.p.02.mac.sophosxl.net/TXT for client 10.200.0.114#61709: question section mismatch: got 0.0.0.0.in-addr.arpa/IN/PTR

02-Feb-201306:02:38resolverDNS format error from 10.200.0.2#53 resolving 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.c0b36a0afe643019123c3fb748adfb457464ae7f2e254a2394276c4b7c9eea3.b.f.00.mac.sophosxl.net/TXT for client 10.200.0.114#61709: question section mismatch: got 0.0.0.0.in-addr.arpa/IN/PTR

02-Feb-201306:02:38resolverDNS format error from 10.200.0.2#53 resolving 0.0.1.0.0.0.0.0.0.0.0.0.0.0.0.00.00.c0b36a0afe643019123c3fb748adfb457464ae7f2e254a2394276c4b7c9eea3.f.00.mac.sophosxl.net/TXT for client 10.200.0.114#61709: question section mismatch: got 0.0.0.0.in-addr.arpa/IN/PTR

02-Feb-201306:02:38resolverDNS format error from 10.200.0.2#53 resolving 3.1o19sr00s2s17s4qp3749413r830n2n4n93s51637826q9o9p7qr03o88nnop23.832p1r741n437393648s26q7238qqssq71r8ns5831o276q6s5rqsr16n809qp4.86752ss34q9sns0073r3p46q83qr6344r6736npns970o9576p7r980sno.s7o8q9940070r5n39oq6p11n7n21244476sq699s.i.00.mac.sophosxl.net/TXT for client 10.200.0.114#61709: question section mismatch: got 0.0.0.0.in-addr.arpa/IN/PTR

From reading other posts I am guessing these are not DNS queries as such but live protection sample checks?

Can I update the software to use a dedicated external DNS and clear my logs going forwards?

TIA

Paul

:1011404


This thread was automatically locked due to age.