Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 413 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Check clients which are using dns proxy ?

ClausP
Hi,
is there any way to check which clients are using the dns proxy ?
Logging / accounting ?

Only ARM ?

Thanks
 Claus


This thread was automatically locked due to age.
  • 0
    In general, DNS servers do little logging as the amount of traffic to them can be quite large.

    However, you could use tcpdump or something to record DNS traffic and then filter the internal IPs to see the users.

    Barry
  • 0
    You can use Network Security >> Packetfilter >> Advanced >> Log unique DNS requests
    to see DNS requests in the packetfilter log.

    Looks like:
    14:44:25 DNS request UDP 10.2.23.190 : 50725 → 10.2.23.129 : 53 len=67 ttl=128 tos=0x00 srcmac=00:1b:6b:35:b6:75 dstmac=00:10:f4:0b:04[:D]d

    Kind regards,
    Daniel