Authoritative Nameserver behind UTM 9

Besides for traffic from: Internet IPv4 instead of Any I would do this exactly like you did it.

In my mind the rule is correct.

Did the WAN IP match correct? Anything in the logs?

Nothing at all in logs...im just getting a lot of UDP DNS requests rn from my internal network to google DNS and some non existing internal IP.

Also tried to disable IPS

like this

Jiri, here are the NS records I find for sametime.cz and none is ns?.sametime.cz (in fact, there's no name resolution for either of those):

Why disable IPS?  Have you done #1 in Rulz?

Then again, why do you want to host your own authoritative name server?

Cheers - Bob

Hey Bob,

thanks for your reply,

I had to switch testing domain to same-time.cz since i have an emails on sametime.cz, sorry for that.

I´m testing an ISPConfig for our client and part of a ISPC will be an authoritative DNS server for couple of their domains.

I disabled IPS just make sure it doesnt block DNS request, enabled it again after I did check logs.

Seems like my ISP block 53 port so nothing wrong with UTM nothing in logs at all. I think DNS request is dropped before reaches my UTM.

I did check Rulz and everything is setup correctly.

ns1 host definition

same-time.cz zone config

Glue record for same-time.cz name servers is created. (ns1.sametime.cz,ns2.sametime.cz)

Jiri

Yes that all looks good to me, Jiri.  I agree with your conclusion that it's your ISP.

Cheers - Bob