This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall Not Allowing DNS Packets

My ASG 8.301 is dropping DNS packets (UDP/53) even though there is a rule (the first rule!) that says to allow them through.

I have attached two pictures from the web admin showing this.

I cannot figure it out. Why is this?

Thanks!

This thread was automatically locked due to age.

Parents

0 wingman over 13 years ago

Do you have forwarders correctly set under you DNS ?

The firewall blocks I can see at the moment are NTP ,i think apple and packets that are not in the table (i.e. the flags are not correct)

Try https://community.sophos.com/products/unified-threat-management/astaroorg/f/53/t/32566 and let me know how it goes
Cancel
Vote Up 0 Vote Down

Cancel
0 JTo over 13 years ago in reply to wingman

In Network Services >> Forwarders, there is nothing in the DND window and the checkbox for "Use forwarders assigned by ISP" is checked and says "Currently assigned forwarders: 192.168.2.1".  I have the ASG (right now) behind my current router / firewall.  It's getting it's IP and DNS information (i.e., 192.168.2.1) from the router (which itself is 192.168.2.1 with an external public IP on the other side).

On the computer attached to the ASG, I can pull up google.com just fine.  And, I can validate that the Safe Search feature works, for example.  And Nude Girls, Sexy Girls, Naked Women, Hot Girls, Sexy Women, Nude Women, Playmates - Playboy.com is blocked correctly based on my settings.

So, I really don't know why the ASG is deciding to dump so much other traffic.  In fact, it's also dropping a lot of TCP/80 traffic which I don't expect to occur at all.  See attached.  (The 1e100.net traffic is Google.)
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 JTo over 13 years ago in reply to wingman

In Network Services >> Forwarders, there is nothing in the DND window and the checkbox for "Use forwarders assigned by ISP" is checked and says "Currently assigned forwarders: 192.168.2.1".  I have the ASG (right now) behind my current router / firewall.  It's getting it's IP and DNS information (i.e., 192.168.2.1) from the router (which itself is 192.168.2.1 with an external public IP on the other side).

On the computer attached to the ASG, I can pull up google.com just fine.  And, I can validate that the Safe Search feature works, for example.  And Nude Girls, Sexy Girls, Naked Women, Hot Girls, Sexy Women, Nude Women, Playmates - Playboy.com is blocked correctly based on my settings.

So, I really don't know why the ASG is deciding to dump so much other traffic.  In fact, it's also dropping a lot of TCP/80 traffic which I don't expect to occur at all.  See attached.  (The 1e100.net traffic is Google.)
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data