Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG as DNS server (for local entries) and forwarder (for public entries)

Hi!

Recently I implemented my Sophos XG as local DNS server, but it does not resolve public DNS names.

My setup is that I have some router working as DHCP server. Sophos is "work in progress", with WAN interface on the same subnet as router. It also has LAN interface (but LAN is not in use yet, until all services I need work fine)

Some details:

  • LAN is 192.168.1.0/24
  • Router: 192.168.1.1
  • Sophos XG working as DNS server: 192.168.1.5 (on it's WAN interface)

Sophos does resolve public and local names, config below:

Public works:

Local works:

While on my PC connected, only local DNS works:

C:\Users\Shadow>ping mcrosoft.com

^C

C:\Users\Shadow>ping vcenter.home

Pinging vcenter.home [192.168.1.7] with 32 bytes of data:

Reply from 192.168.1.7: bytes=32 time=2ms TTL=64

Ping statistics for 192.168.1.7:

    Packets: Sent = 1, Received = 1, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 2ms, Maximum = 2ms, Average = 2ms

C:\Users\Shadow>nslookup microsoft.com

Server:  sophos-out.home

Address:  192.168.1.5

DNS request timed out.

    timeout was 2 seconds.

DNS request timed out.

    timeout was 2 seconds.

DNS request timed out.

    timeout was 2 seconds.

DNS request timed out.

    timeout was 2 seconds.

*** Request to sophos-out.home timed-out

 

C:\Users\Shadow>nslookup vcenter.home

Server:  sophos-out.home

Address:  192.168.1.5

DNS request timed out.

    timeout was 2 seconds.

DNS request timed out.

    timeout was 2 seconds.

Non-authoritative answer:

DNS request timed out.

    timeout was 2 seconds.

Name:    vcenter.home

Address:  192.168.1.7

 

I think FW rules should be ok.

But it doesn’t work.

How to make Sophos to resolve local DNS entries and work as public DNS forwarder?



This thread was automatically locked due to age.
Parents Reply Children
No Data