This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNS problem

Hi,

1. i just down loaded the software version ASG 7.X
2. I'm using the ISP as DNS forwarders.
3. Problem now after the basic setup, I still have no Internet access.

A. WebAdmin> tools> dnslookup for ie cnn.com  say unable to find anything.
127.0.0.1:53 comes up as the reference ip  ??? I thought it should be the ISP's  IPs

B. packet filter rule in place  >> internal network   dns  any

Why does it keep using 127.0.0.1 as the lookup?

Any tips?

This thread was automatically locked due to age.

Parents

0 Jack Daniel over 17 years ago

Do you have a masquerading rule defined for your internal network to the external interface?

Can you ping out to the Internet by IP, but not by DNS name?
Cancel
Vote Up 0 Vote Down

Cancel
0 newcdn over 17 years ago in reply to Jack Daniel

Do you have a masquerading rule defined for your internal network to the external interface?

Can you ping out to the Internet by IP, but not by DNS name?

>>>Do you have a masquerading rule defined for your internal network to the >>>external interface?

yes (packet filter rules>NAT>)

>>Can you ping out to the Internet by IP, but not by DNS name?[/QUOTE

no just to the gateway ie 192.168.2.100

Error messages (lots like this)
=====
2008:09:30-22:01:00 (none) named[3426]: too many timeouts resolving 'yahoo.ca/MX' (in '.'?): disabling EDNS
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 newcdn over 17 years ago in reply to Jack Daniel

Do you have a masquerading rule defined for your internal network to the external interface?

Can you ping out to the Internet by IP, but not by DNS name?

>>>Do you have a masquerading rule defined for your internal network to the >>>external interface?

yes (packet filter rules>NAT>)

>>Can you ping out to the Internet by IP, but not by DNS name?[/QUOTE

no just to the gateway ie 192.168.2.100

Error messages (lots like this)
=====
2008:09:30-22:01:00 (none) named[3426]: too many timeouts resolving 'yahoo.ca/MX' (in '.'?): disabling EDNS
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Simon Shaw over 17 years ago in reply to newcdn

Thats pinging a DNS name. Try pinging an IP instead.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 17 years ago in reply to Simon Shaw

ping 4.2.2.1
is a good test as it's easy to remember, and is always up.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 newcdn over 17 years ago in reply to Simon Shaw

Thats pinging a DNS name. Try pinging an IP instead.

Unable to ping any ip other then 192.168.2.100. Pinging any Ip outside of the network or domain name will not work. Unable to find or resolve the name
Cancel
Vote Up 0 Vote Down

Cancel
0 newcdn over 17 years ago in reply to BarryG

ping 4.2.2.1
is a good test as it's easy to remember, and is always up.

Barry

Ping 4.2.2.1 ?? new one what purpose does it serve?
Cancel
Vote Up 0 Vote Down

Cancel
0 eganders_01 over 17 years ago in reply to newcdn

4.2.2.1 - .6 are public DNS servers run by Level 3. The IP's are easy to remember, and the L3 setup is fully redundant and very reliable. Outside of that, there's nothing special about them.
Cancel
Vote Up 0 Vote Down

Cancel
0 newcdn over 17 years ago in reply to eganders_01

4.2.2.1 - .6 are public DNS servers run by Level 3. The IP's are easy to remember, and the L3 setup is fully redundant and very reliable. Outside of that, there's nothing special about them.

well you learn something new everyday [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 17 years ago in reply to newcdn

Newcdn, can you ping 4.2.2.1 from the tools menu in the Astaro? If not, have you used this connection successfully before the Astaro?

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 newcdn over 17 years ago in reply to BAlfson

Newcdn, can you ping 4.2.2.1 from the tools menu in the Astaro? If not, have you used this connection successfully before the Astaro?

Same IP

Pinging X.X.X.X with 32 bytes of data:

Reply from : bytes=32 time
Cancel
Vote Up 0 Vote Down

Cancel