This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Redirecting all DNS traffic to the local service

SalishSwede over 4 years ago

I'm trying to capture outbound DNS traffic so the local server can pick it up.

My forwarders are DNSsec connections to Quad9 (IMHO, the most secure DNS source)

I'm trying to do this with a NAT rule, but I'm getting an error message that makes no sense to me:

"The NAT rule object cannot use any address objects for the traffic destination attribute when using this NAT mode."

The traffic destination attribute can only be an address object.

You can't just write in an address.

You have to create an object first.

That's how the whole UTM interface works.

Can someone help me out?

Thanks,

Doug

This thread was automatically locked due to age.

0 Keyur over 4 years ago

Hi Doug

You need to specify the destination IP network/host in DNAT configuration.

Please specify it in "Going to" option instead of "Any" and try to configure

Regards,

Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel
0 Jaydeep over 4 years ago

Hi SalishSwede

I assume you're trying to setup DNS proxy and forward all the DNS queries from your network to the specified address. However, DNAT rule will not allow you to configure ANY as a Destination (Going to) address. You may Specify a Network Group in the Destination and that should help you achieve in some restricted manner.

Regards

Jaydeep
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 4 years ago

Hi Doug,

Sorry, but your DNAT doesn't make any sense to me. Why would you change the destination to an IP on your UTM?

Does consulting DNS best practice give you any ideas for how to accomplish your goal?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 SalishSwede over 4 years ago in reply to BAlfson

Howdy,

So the idea was simply to intercept unauthorized attempts to use DNS and to send them to the UTM which then forwards to 9.9.9.9.

It seems every application on my network uses it's hard-coded DNS server. If the traffic is legitimate, public dns should be just fine.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 4 years ago in reply to SalishSwede

I get it now, Doug. Does using the DNAT trick in #2 in Rulz (last updated 2019-04-17) do what you want?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel