Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Reporting DNS esolution & Rcode Refused

All-

I have been noticing a large number of rcode refused in the DNS log from China which is blocked via country blocking. It is understood rcode refused is a remote DNS issue. My discussion references another point. Clicking network protection displays a flash based report documenting the most recent source/host packets. Having some time to to research today I noticed that the reporting function is attempting to resolve the IP addresses of the source/host packets to a DNS name. The resultant being a high number rcode refusals from Chinese addresses. China typically is the number one source of daily shopping for open ports. Today one Chinese IP is currently at 98 times. (210.72.13.68) Short of turning off the reporting feature is there any known way of preventing DNS resolution for the IP's noted in source/host packets? Can Geo location be substituted in place of DNS resolution? 


Thanks,
Jim


This thread was automatically locked due to age.
Parents Reply Children
No Data