Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

V19 DNS Curiosity

I have my XG106 with v19 GA behind my XG125 with v18.5.2 MR2 for home testing.  The only thing connected to the XG106 is the WAN link which feeds into a port on the XG125.

The strange thing is I see in the XG125 logs is that the XG106 is making multiple DNS requests to DNS servers that are not defined in the XG106 DNS server settings, which is the IP of the XG125.  This includes DNS look ups to different servers in China and Russia.  

Any ideas why this is happening?



This thread was automatically locked due to age.
Parents
  • Per Default there are some FQDN Entries, which could be potentially be DNS entries within other countries. See FQDN Hosts. Try to delete them all and recheck again. 

    __________________________________________________________________________________________________________________

  • In the FQDN list in Hosts and Services I have several .ru and .cn entries for a specific block rule as well as the google fqdns for .cn and .ru.  I also have China and Russia as blocked countries.  Why are there DNS requests to China and Russia if those countries are blocked?

    Are you saying to delete all of those .cn and .ru entries in the FQDN list?

Reply
  • In the FQDN list in Hosts and Services I have several .ru and .cn entries for a specific block rule as well as the google fqdns for .cn and .ru.  I also have China and Russia as blocked countries.  Why are there DNS requests to China and Russia if those countries are blocked?

    Are you saying to delete all of those .cn and .ru entries in the FQDN list?

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?