Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 2066 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

DNS Proxy

yashax
Just wanted to make sure that I understand the purpose of DNS proxy.

If the network has internal DNS server, it forwards (setup as a forwarder) all of the requests to Astaro Firewall, which then uses the DNS Proxy and the defined external DNS servers to to a lookup!?  All the clients point to the Internal DNS Server. DNS proxy also, stores the old addresses and responds to them from cache rather than looking it up? Is that right?  

Also, if network does NOT have an Internal DNS server, then clients would point directly to Astaro Firewall and everything above would still be true? Right?

Is there any security advantage or disadvantage of using the DNS Proxy?


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to ollion
    Does it mean that I am correct in thinking that the original post is true?

    Also,
      Is there any security advantage or disadvantage of using the DNS Proxy? 

    How does it differ from the split brain (dual DNS, one inside, one outside) concept?
  • 0 in reply to yashax
    hi,

    the security advantage is, that you don't have direct connections from internal network to the internet.
    using an internal dns-server has the advantage, that you can use 'inofficial' internal domain names, i.e. ".athome" - or something similar.

    bye,
    michael
Unfiltered HTML