This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Question to ASL / DNS

Hi NG, ASL Friends
Need, if possible, an adequate DNS for ASL.
There is a hack for it?
The following scenario.
We have here a Symantec FES 7.x and would like those against a ASL to exchange

However the FES 7.x functions as primary DNS.
One can integrate a DNS server in ASL?
We do not want to buy additional hardware for a DNS
server.

Cheers

Stefan

This thread was automatically locked due to age.

Parents

0 pablito over 21 years ago

I don't know what an FES is but you say it acts as a primary DNS? You can activate the ASL DNS proxy and point it at the FES. Then if users point to ASL for DNS it will get the information from the FES.

This works for inside or outside users if you enable access for it ie: Listen on the required interface and Allow DNS from the desired source networks.
Cancel
Vote Up 0 Vote Down

Cancel
0 StefanS_01 over 21 years ago in reply to pablito

Hi pablito,

FES means Symatec Enteprise Firewall (originally Raptor Eagle). FES has its own DNS on board.
With this DNS servers hosting we our own domains.
I look now for a possibility of making this also with the AS. Ideal way with a Web interface.

Cheers

Stefan an Merry Christmas to all
Cancel
Vote Up 0 Vote Down

Cancel
0 Udo_Seiler over 21 years ago in reply to StefanS_01

Hi Stefan,

per default the astaro only works as DNS-Proxy.
If you need a internal DNS you have to "hack" the astaro (search the UBB for this, I don't know if this is possibel) or you have to setup DNS on another machine in your network.

HTH

Regards

Udo Seiler
Cancel
Vote Up 0 Vote Down

Cancel
0 Simon Shaw over 21 years ago in reply to Udo_Seiler

Running a full primary DNS on a firewall is really not a good idea. Bind's had a lot of holes in it.
Cancel
Vote Up 0 Vote Down

Cancel
0 SecApp over 21 years ago in reply to Simon Shaw

djbdns would be solid, but Astaro seems to have an undiscussed issue with Dan Bernstein's software.

P.S. See Re: Does someone have a solution for it?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 SecApp over 21 years ago in reply to Simon Shaw

djbdns would be solid, but Astaro seems to have an undiscussed issue with Dan Bernstein's software.

P.S. See Re: Does someone have a solution for it?
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data