Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 27 subscribers
  • Views 12350 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNS forwarding on XG

lucakuehne

Hi!

I'm new to the Sophos XG and so I'm not really familiar with the Sophos-terminology yet.

I'm trying to setup a DNS forwarding similar to the on the Windows Server DNS. There I can add servers, to which the DNS-request gets forwarded in case the Windows DNS can't resolve the address, which is requested.

So I want the XG to redirect the DNS request in case it can't resolve it itself.
How is that called on the XG? And where can I find it?

I thought it maybe uses the DNS servers, which the XG uses and I configured here, as forwarder:

Regards
Luca



This thread was automatically locked due to age.
Parents
  • 0

    The XG does not currently act as a forwarder. The DNS entries you have highlighted are what the DNS uses to resolve queries that are sent to it. You can use the XG as a DNS, but not as a forwarder.

    Ian

  • 0 in reply to rfcat_vk

    So let's say I define the XG as the DNS server for a network. Then if one of the clients of the network makes a DNS request, the XG uses the DNS entries I highlighted to resolve this DNS request, correct?

    If so: Do I have to create a Firewall Rule for this to work? Because in my DMZ this doesn't seem to work.

  • 0 in reply to lucakuehne

    Hi,

    the XG does not have a DNS proxy yet, hopefully in v18? Assuming you are using the XG for the DHCP in your DMZ, then addd the XG DMZ interface as your DNS or just assign a fast external DNS with a firewall rule allowing DNS out. If you want sophisticated DNS then you are better off setting up your server as a DNS and only allowing it out to the world.

    Ian

Reply
  • 0 in reply to lucakuehne

    Hi,

    the XG does not have a DNS proxy yet, hopefully in v18? Assuming you are using the XG for the DHCP in your DMZ, then addd the XG DMZ interface as your DNS or just assign a fast external DNS with a firewall rule allowing DNS out. If you want sophisticated DNS then you are better off setting up your server as a DNS and only allowing it out to the world.

    Ian

Children