This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Static DNS in Reports

I have an Astaro firewall (latest version) running between my main network and a private, sensitive network that I don't manage. The reports are viewed by the administrator of the other network who wants to be able to easily see what is talking to what through the firewall. My problem is that many of the IP addresses don't translate to names (because they are private) or even if they did they would be fairly meaningless things from my AD server just giving the workstation number. So I thought that by setting up 'static entries' I could make these addresses show meaningful names. But it just doesn't seem to work. It can and does resolve public addresses but all the others appear as numbers.

Why don't the reports use the static entries? Thanks for any help...

Mike

This thread was automatically locked due to age.

0 BarryG over 15 years ago

Hi,
You need to do DNS request routing for your reverse zones, e.g. 1.168.192.in-addr.arpa.

also see
https://community.sophos.com/products/unified-threat-management/astaroorg/f/53/t/32566

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 Sambo over 15 years ago

I'd like to set this up as well, but I'd like to use the Astaro box as my Internal DNS server if possible. The solutions mentioned on the topic Barry mentioned all seem to require a separate DNS server. Is there any way to achieve this using Astaro only?
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 15 years ago in reply to Sambo

Hi,
you will have to wait until v8b goes GA. V8 has the functionality your are looking for. You will need to setup the "user" with static IP entries and tick a couple of other boxes.

I hope that will work for you.

Ian M
Cancel
Vote Up 0 Vote Down

Cancel
0 Sambo over 15 years ago in reply to RFCat_vk_01

You will need to setup the "user" with static IP entries and tick a couple of other boxes.

I'm assuming you mean that I would have to do this 'in v8'?
Cancel
Vote Up 0 Vote Down

Cancel
0 RFCat_vk_01 over 15 years ago in reply to Sambo

Hi,
correct.
You could download the beta and build yourself a test site to experiment with the function.

Ian M
Cancel
Vote Up 0 Vote Down

Cancel
0 Sambo over 15 years ago

Ok, thanks for the quick reply Ian [:)]
Cancel
Vote Up 0 Vote Down

Cancel
0 mwells over 15 years ago in reply to Sambo

So, for the private addresses in my network (actually 172.16.x.x) I could use the AD DNS to look them up, although I'll get workstation names which aren't all that meaningful in most cases (workstation name = asset tag number - it seemed like a good idea at the time). For the addresses in the other network (192.168.1.x) there is no DNS server so I'm stuck. Is that correct?

Or I wait for V8 which will allow this 'shortcut' directly to Static Entries?

I think I'll wait for V8. Thanks for all the advice.

Mike
Cancel
Vote Up 0 Vote Down

Cancel