This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNS Problem

Ich habe bei mir eine UTM in betrieb genommen, diese befindet sich hinter einer FritzBox 4790. Die Sophos wurde dort als Exposed Host angelegt.

Desweitern habe ich zwei Interface auf der Sophos angelegt ein Extern Wan (192.168.178.243/24 GW:192.168.178.1) und ein Intern 192.168.88.0/24 GW:192.168.88.254.

DNS und DHCP habe ich das Intern Interface aktiviert. Als DNS habe ich eine Gruppe erstellt mit den beiden Google DNS Servern.

Firewall Rule habe ich von Intern --> DNS -- Any Ipv4 aktiviert.

NAT ist auch aktiviert: Intern-->Extern.

Wenn ich meine PC an das Interface Intern hänge, bekomme ich zwar eine IP Adresse aus meinem DHCP Bereich, aber ich komme nicht ins Internet.

DNS auf der Sophos funktinoniert aber auf dem Client kann ich kein nslookup machen.

Kann mir jmd helfen, würde auch TW zugang geben und gemeinsam zu schauen.

Mit freundlichen Grüßen

Moritz

This thread was automatically locked due to age.

Parents

0 Ol Deda over 7 years ago

1. Go In Webadmin-Suppprt-Tools-Dns Lookup

and Check if UTM reaches the google-dns servers by itself. And ping 8.8.8.8 to see if UTM has WAN interface configured correctly.

2 Check if Masquerade Nat is Configured Correctly
Cancel
Vote Up 0 Vote Down

Cancel

0 Moritz Boettcher over 7 years ago in reply to Ol Deda

Hello Oldeda,

Thank you for reply.

I have DNS checked via the DNS Lookup Tools, I can resolve to ip and also name. 8.8.8.8 and 8.8.4.4 I can successfully ping. 

The Masquerating Nat is from the Intenen Interface to Extern WAN.

Nevertheless, I have no Internet with my client via the internal interface

Reply

0 Moritz Boettcher over 7 years ago in reply to Ol Deda

Hello Oldeda,

Thank you for reply.

I have DNS checked via the DNS Lookup Tools, I can resolve to ip and also name. 8.8.8.8 and 8.8.4.4 I can successfully ping. 

The Masquerating Nat is from the Intenen Interface to Extern WAN.

Nevertheless, I have no Internet with my client via the internal interface

Children

0 Ol Deda over 7 years ago in reply to Moritz Boettcher

Can you post a screenshot of the Firewall Rule
The rule must be:

Sources: Intrnal Network
Services: ANY
Destination: Any
ALLOW
Cancel
Vote Up 0 Vote Down

Cancel
0 Alexander Busch over 7 years ago in reply to Moritz Boettcher

Then, add firewall rules

Internal -> HTTP -> Internet

Internal -> HTTPS -> Internet

And you should be able to browse in the internet.
Cancel
Vote Up 0 Vote Down

Cancel
0 Moritz Boettcher over 7 years ago in reply to Ol Deda

Hello,

actually i have this rules activ.
Cancel
Vote Up 0 Vote Down

Cancel
0 Moritz Boettcher over 7 years ago in reply to Alexander Busch

See my Post a i have rule:

Internal --> Web surfing --> any IPV4
Cancel
Vote Up 0 Vote Down

Cancel
0 Moritz Boettcher over 7 years ago in reply to Moritz Boettcher

More Info about my UTM:
Cancel
Vote Up 0 Vote Down

Cancel
0 Ol Deda over 7 years ago in reply to Moritz Boettcher

What you see in Firewall Live Log?
Cancel
Vote Up 0 Vote Down

Cancel
0 Moritz Boettcher over 7 years ago in reply to Ol Deda

hi,

192.168.88.50 is my Laptop.
Cancel
Vote Up 0 Vote Down

Cancel
0 Ol Deda over 7 years ago in reply to Moritz Boettcher

Check the mark Log, In firewall rule 2.
The traffic from your labtop isnt web surfing
Cancel
Vote Up 0 Vote Down

Cancel

0 Moritz Boettcher over 7 years ago in reply to Ol Deda

where can I find that? I am new to the Sophos environment.

Do you mean that here?

Ol Deda over 7 years ago in reply to Moritz Boettcher

This reply was deleted.
Cancel
Cancel