Sophos Firewall

Discussions XG DNS resolution error

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 3 replies
Subscribers 27 subscribers
Views 13170 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG DNS resolution error

Stefan Höhnemann over 8 years ago

Hi,

i have a problem with DNS resolution on my XG 115, but i think it's a setting mistake.

VLAN 1:

Client1 - IP 192.168.10.10

DNS: 192.168.10.1

VLAN 2:

Client2 - IP 192.168.20.10

DNS: 192.168.20.10

FW Rule: ICMP, DNS, RDP allowed

Client1:

nslookup Client2 - non-authoritative answer 192.168.20.10

ping Client2 -> unknown DNS Name

ping 192.168.20.10 -> successful

nslookup 192.168.20.10 -> DNS 192.168.20.1 / 192.168.20.10

mstsc /v Client2 -> nothing

mstsc /v Client2 -> successful

What is the correct setting to get correct DNS information from other VLAN?

Thanks in advance for your support.

Regards,

Stefan

This thread was automatically locked due to age.

Parents

0 lferrara over 8 years ago

Stefan,

if the DNS IP is the XG interface, make sure that the DNS service is allowed on the proper zone (Administration > Device acces).

If the DNS is located on another zone, make sure proper firewall rule is created (allow DNS traffic).

Use tcpdump to understand what's wrong.

Regards
Cancel
Vote Up 0 Vote Down

Cancel
0 Stefan Höhnemann over 8 years ago in reply to lferrara

Hi lferrara,

i checked your points and it's confused:

Ping Client2 - empty

Ping Client2. (with Point as last character) - DNS, RDP - all is fine

I checked ethernet connection settings - DNS Suffix is empty.

No Domain names set into the firewall.

Any ideas?

Regards,

Stefan
Cancel
Vote Up 0 Vote Down

Cancel
0 Aditya Patel over 8 years ago in reply to Stefan Höhnemann

Hi Stefan Höhnemann

Could you confirm if you are using a machine name or a host IP address ?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Aditya Patel over 8 years ago in reply to Stefan Höhnemann

Hi Stefan Höhnemann

Could you confirm if you are using a machine name or a host IP address ?
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data