This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNS NAT

Hi !^^

There is a LocalDNS(ADGuard) which has 192.168.3.250 (blocking ADS etc)
Im using Sophos XG Home with SSLVPN which uses Local DNS as well.

Ive got a NAT policy which should Translate GOOGLE DNS addresses to my LocalDNS to prevent overpassing and to have adquard protection etc.

NAT policy looks like this:

As i understand all traffic requested to 8.8.8.8 and 8.8.4.4 should be translated to my localDNS ?

If so, If im trying to ping googledns im getting Request timeout ;(

What im doing wrong thx for help :)

This thread was automatically locked due to age.

0 Keyur over 5 years ago in reply to Regex

Hi Regex

This will provide you more info - https://community.sophos.com/products/xg-firewall/f/recommended-reads/116102/understanding-new-decoupled-nat-and-firewall-changes-in-v18 and let me tag LuCar Toni to share his expertise on this.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to Keyur

What is not working nowadays?

Could we see the current Firewall Rule and the NAT Rule?

DNAT looks fine. Firewall would be: SRC ANY , Destination GoogleDNS, Service DNS. That allows the traffic to flow. Zone will be your Server Zone, with the Ubuntu.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to Keyur

What would be nice if the video actually showed the screens that are in production.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to LuCar Toni

Hi LuCar Toni,

The issue I have is that the logviewer always shows the google dns address, it never shows the redirected address. So I keep thinking there is something wrong with my firewall and inked NAT but no matter what I change the result is always the same.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to rfcat_vk

But the redirect works fine, isnt it?

If you can confirm this, we could actually figure out, what is wrong with this. But i assume, i already know what is going on in this process and think, this will be fixed in the future (Major Release).
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to LuCar Toni

Hi LuCar Toni,

the firewall rule, the NAT rule and the logviewer details.

The above might help to understand my confusion?

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 5 years ago in reply to rfcat_vk

But you are not redirecting the DNS to anything?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 5 years ago in reply to LuCar Toni

I would have thought the NAT rule was redirecting the traffic to the internal interface/DNS of the XG? Or at least that was my understanding from the webcast.

I can find reference but not details of the KBA.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Regex over 5 years ago in reply to rfcat_vk

These are my settings.

Fo my guess it should working but its not ;)
Cancel
Vote Up 0 Vote Down

Cancel