Best dns configuration with dns host entries

Hi Mario,

Check #4.1 in my guide here.

Any help with that?

Hi Mario,

Check #4.1 in my guide here.

Any help with that?

it doesnt help.  i have no multiple isp links.

i have no static route configured. I point directly at the top to dns server.

any help?

What do you have for forwarders in your network>dns settings. Use fast DNS servers as your forwarders inside XG and use XG as DNS server for your clients. Is that what you are doing right now?

At the moment i have get dns from dhcp, i already tried it with ip from my gateway (fritzbox).

Do i have to setup real dns servers, google dns maybe?

Yes you are right, i want sophos as dns because static host entries and fast internet dns responses.

Yes use google DNS forwarder or even your ISP DNS forwarder if it is any good. XG will use them to resolve all names from the internet but your local.domain will still be resolved by XG.

ok i put my 2 isp dns and 1 google dns into the dns fields under network now.

is it correct under dhcp pointing to sophos ip as dns?

because i want to hide real dns ip and i need it for resolving local.domain.

YES

Client > XG DNS.......XG>INTERNET (google DNS)

Your clients will never see anything but XG dns specially if you don't make any firewall rules to allow DNS traffic.

Thanks for your help!

Beware with some fritzBoxes.  If you're on a network with them and have working IPv6,  clients might use IPv6 for DNS, directly using the fritzbox for DNS , bypassing your Sophos DNS.

Yes ok but how to give my ipv6 clients the sophos as dns as well? i have added static dns servers in sophos dns configuration, too.

long time ago.....from memory:

The router advertisements sent out by fritzbox caused it.  I blocked them on L3 switch port connected to the Fritzbox.  The L3 also does the router advertisements, has proper flags configured, so additional parameters are received from DHCPv6 on windows server.  (or no IPv6 dns , so ipv4 only is used for dns).  And the L3 switch uses fritzbox as its default IPv6 gateway