Sophos Firewall

Discussions DNS queries failed with external DNS

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 3 replies
Subscribers 28 subscribers
Views 739 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNS queries failed with external DNS

Robo over 4 years ago

Hi,

I have a strange problem with DNS: When DNS server is set to an external server, the FW can´t resolve any name

-> Networking -> Zones -> "my Zone" -> DNS is checked

-> Networking -> DNS -> static -> DNS1: 1.1.1.1

-> Firewallrule any/any (for testing)

The Log shows that the query passes the firewall:

But the answer never returns to the client:

If I set a internal DNS server under static DNS configuration, everything works fine.

Any Idea??

Regards

Robin

This thread was automatically locked due to age.

0 FormerMember over 4 years ago
Hi Robo,

Thanks for reaching out, and welcome to the Sophos Community!

Is DNS allowed for the WAN zone? Go to Administration > Device access > Network service > DNS.

Also, check if the "dnsd" service is running on the firewall by running the following command from the advanced shell: service -S | grep -i "dnsd"

Sophos XG Firewall: How to SSH to the firewall using PuTTY utility

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Robo over 4 years ago

Hi and thanks.

But unfortunately that was not the solution :( I have allowed DNS for WAN and still the same. (I´m pretty shure that I have opened UDP53 from internet with that setting. Output of service -S | grep -i "dnsd" is "RUNNING"

Any other Idea?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Robo

What does the device you are testing from show as its dns?
ian
Cancel
Vote Up 0 Vote Down

Cancel