[[[:)]]] [[[:)]]] [[[:)]]] Thanks for the chuckle.
Do you set DNS in the clients with a DHCP server in your Windows server? What DNS settings are given to the clients?
Are you running a DNS Server in your windows server? Whar forwarders do you have configured?
Do you have the Astaro DNS configured? What are the 'Allowed networks'? What Forwarders are assigned? Do you have 'Use forwarders assigned by ISP' checked?
I think you have a DNS configuration problem, but it's hard to make suggestions when tht's unclear.
What DNS settings are given to the clients?
Are you running a DNS Server in your windows server? What forwarders do you have configured?
Do you have the Astaro DNS configured? What are the 'Allowed networks'? What Forwarders are assigned? Do you have 'Use forwarders assigned by ISP' checked?
Clients have as main dns an ip address(active directory dns server ip) if a local query handle no problem... if client needs an internet name, as forwarders we use at active directory dns server opendns servers ip.
Each device caches DNS resolution requests. If the local PC doesn't already know the IP of an FQDN, it asks (in your case), your internal DNS. If the internal DNS has resolved that for someone else, it will answer with the information it has cached. Etc.
Over the last two years, it seems like the following has become the accepted standard for best practice in your case (replace OpenDNS servers with others nearer/faster for you):
[LIST=1]
Internal devices point at internal name server for DNS, then the Astaro, then the OpenDNS servers.
The internal DNS server's first forwarder is to the Astaro DNS Proxy, then to the OpenDNS servers.
The Astaro DNS Proxy lists "Internal (Network)" as allowed client.
The Astaro DNS Proxy lists the OpenDNS name servers as forwarders, and 'Use forwarders assigned by ISP' is not checked.
In 'Request Routing', the internal DNS is used for reverse DNS of internal IPs (for example if your internal subnet is 172.16.20.0/24, you would have '20.16.172.in-addr.arpa -> {Internal DNS}'. With that, the Astaro can list machine names instead of internal IP addresses in the reports.
[/LIST]
See what happens if you make those changes.
- I used to be a Double AV is Better than Single AV Person but today I gave up on this ClamAV as over the years it simply give me more false alarms that I need to create exceptions and Never showed me it caught something that Avira may missed. ( I do purposely download viruses that is caught by Astaro and submit to Virustotal to see if it is Avira / ClamAV caught it and so far ClamAV never showed me it is useful)
- Removed ClamAV from HTTP, FTP, SMTP and POP Proxy, my RAM dropped from 39% to 30%, so for those with Appliance with limited RAMs ( which I do not understand), that 9% is about 276MB (I have 3GB RAM) ( I hope I calculated correctly )
