Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 10 replies
  • Subscribers 29 subscribers
  • Views 43005 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Dynamic DNS Service

JensStraten

I just upgraded my home appliance from UTM to XG. On the UTM I have used DtDNS for dynamic DNS services. Unfortunately, I found that the DtDNS provider is no longer listed. So, here are my questions.

1. Are you still working on adding more dynamic DNS service providers?

2. I also noticed Sophos being listed as a service provider, but it give me the following error message "DDNS 'vpn.straten.org' account could not be created". Is this still under construction or does this require an additional step not listed in the online help?

Thanks,

Jens



This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to Slawski

    Hi Slawek,

    It should resolve to the name entered (YOUR_HOST.myfirewall.co), but it might take some time until your DNS provider gets the correct information.

    You can check here if it gets resolved from a different location: https://www.ultratools.com/tools/dnsLookup

    Once it works, you can assign a CNAME with a different domain against it.

    That said, I believe the service is currently down. It seems that this is still in beta testing and so it stops working from time to time...

    Best regards,

    Jens

Children
  • 0 in reply to JensStraten

    Ok, it worked.

    But... how can I be sure that nobody will not hijack that name ?

    PS.: I have secured the firewall with a certificate but anyway... I'm curious.

    SK

  • 0 in reply to Slawski

    I don't know. I would hope that the Sophos XG is sending some kind of internal authentication (licensing information?) that prevent another Sophos XG from stealing it. But even then I would guess that if it isn't used, it would be released at some point in time...

    Good question!

  • 0 in reply to JensStraten

    BTW: It just stopped working.

  • 0 in reply to Slawski

    The fact Sophos XG is so awesome and supports DynDNS but does not let you specify a server address is impossibly stupid IMHO. Here is how to use Sophos DynDNS with any DynDNS compatible provider like no-ip.com:

    Login to admin.

    Click Network -> DNS 

     

    Then scroll down to "DNS Host Entry" and click ADD:

     

    Host/Domain Name: members.dyndns.org

    Entry Type: Manual

    IP Address: 8.23.224.120 (You might want to do a dns lookup of this to see if the server ip has changed - or resolve the provider of your choice's ip and use that instead - and this is the rub with this setup - if the provider changes the server ip it breaks)

    Time to Live (seconds): 60

    Weight (1-255):1

    Publish on WAN: unchecked

    Add reverse DNS lookup for this Host entry: unchecked

     

    Now configure Dynamic DNS but use the no-ip.com username and settings. It works for me!