This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM 9.201-23 DNS Issues

Hey Guys:

I have run into a new issue with 9.2. I'm not sure if it is a bug or what, but at least once every week DNS Resolution on the Gateway stops working and I have to go in and manually flush the cache for DNS resolution to start working again. I turned off DNSSEC Validation and will test with it off to see if that fixes the issue. Any advice would be greatly appreciated.

My DNS Setup is:
Clients -> Server -> Sophos -> OpenDNS

Thanks,
Kyle

This thread was automatically locked due to age.

Parents

0 William Warren over 11 years ago

don't have your server use the firewall for resolution. have the server use the opendns and have the sophos use the isp dns filters.

Owner: Emmanuel Technology Consulting

http://etc-md.com

Former Sophos SG(Astaro) advocate/researcher/Silver Partner

PfSense w/Suricata, ntopng,

Other addons to follow
Cancel
Vote Up 0 Vote Down

Cancel
0 kyle5281 over 11 years ago in reply to William Warren

I Guess I'm confused now. Bob recommends it the way I have it. Is there some big issue with using Astaro as the forwarder? Here is the post I am referring to https://community.sophos.com/products/unified-threat-management/astaroorg/f/53/t/32566
Cancel
Vote Up 0 Vote Down

Cancel
0 Billybob over 11 years ago in reply to kyle5281

I Guess I'm confused now. Bob recommends it the way I have it. Is there some big issue with using Astaro as the forwarder? Here is the post I am referring to https://community.sophos.com/products/unified-threat-management/astaroorg/f/53/t/32566

How do you know the dns is not working? What is the result of dig queries? The bind server queries open dns servers (as you have set up) and then queries the root servers for dns resolutions. You sure you are not having connectivity issues?
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 11 years ago in reply to kyle5281

I Guess I'm confused now. Bob recommends it the way I have it. Is there some big issue with using Astaro as the forwarder? Here is the post I am referring to https://community.sophos.com/products/unified-threat-management/astaroorg/f/53/t/32566

I setup customers the way Bob recommends as well --

As for DNS issues -- I think OpenDNS does not support DNSSEC validation. That is likely your issue.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BrucekConvergent over 11 years ago in reply to kyle5281

I Guess I'm confused now. Bob recommends it the way I have it. Is there some big issue with using Astaro as the forwarder? Here is the post I am referring to https://community.sophos.com/products/unified-threat-management/astaroorg/f/53/t/32566

I setup customers the way Bob recommends as well --

As for DNS issues -- I think OpenDNS does not support DNSSEC validation. That is likely your issue.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data