Add different DNS forwarders for another interface

Hi,

in my opinion it's not possible because WebProtection uses the DNS forwarders of the UTM, and you are not able to add different forwarders based on interfaces or subnets.

You can use DHCP to distribute different DNS settings for the clients, but DNS querys for HTTP requests will be solved by the UTM as long as WebProtection is enabled.

Jas

Hi,

in my opinion it's not possible because WebProtection uses the DNS forwarders of the UTM, and you are not able to add different forwarders based on interfaces or subnets.

You can use DHCP to distribute different DNS settings for the clients, but DNS querys for HTTP requests will be solved by the UTM as long as WebProtection is enabled.

Jas

Thanks. My problem is that web protection just doesn't seem to be working all that well.

For example I have pornography blocked and sometimes it blocks, others it doesn't. Also I have this post in unanswered:

https://community.sophos.com/products/unified-threat-management/f/general-discussion/90101/content-blocked-pages-not-displaying-correctly-or-at-all

I use UTM's throughout my organisations that I look after with no problems, however the home UTM not in an AD environment just doesn't seem to be all that reliable for me for some reason.

Hi Daniel,

Please show us pictures of the configurations in Web Protection section. I am sure that is a configuration issue. 

Make sure there is no exception or the proxy is not skipped from the MISC option in Filtering option. Show us http.log.

Thanks

Hi,

I would suggest that you post your WebProtection config in the other thread because this thread deals with a other question.

Jas

Thank you all.

I had my config looked at by one of my staff who has undertaken Sophos UTM engineer training and he worked out what I was trying to do and worked out why the content filtering wasn't working.

I think everything is sorted.

Thanks