Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 8 replies
  • Subscribers 2 subscribers
  • Views 2891 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

please someone can explain or reproduce this

eldorado
hello all

following situation:

ATP and IPS enabled
On a client PC -> open cmd prompt -> ping commonname.com
(answer: host could not be resolved)

ATP Alert:

16:07:25  AFCd  UDP  Troj/Dluca-BM  (internalDNSServer01IP) →  193.247.204.1      drop 
16:07:26  AFCd  UDP  Troj/Dluca-BM  (internalDNSServer02IP) →  193.247.204.1      drop 
16:07:29  AFCd  UDP  Troj/Dluca-BM  (internalDNSServer02IP)  →  193.5.23.1      drop 
16:07:29  AFCd  UDP  Troj/Dluca-BM  (internalDNSServer01IP)  →  193.5.23.1      drop 
16:07:33  AFCd  UDP  Troj/Dluca-BM  (internalDNSServer02IP)  →  164.128.36.34      drop 
16:07:33  AFCd  UDP  Troj/Dluca-BM  (internalDNSServer01IP)  →  164.128.36.34      drop

The Internet IP are the DNS-Forwarders of our ISP

UTM Release 9.307-6

Thanks a lot :-)


This thread was automatically locked due to age.
Parents Reply Children
No Data