Sophos UTM 9 model SG230 firmware version 9.411-3.
In the past we have had a lot of issues on this firewall with DDOS attacks on our DNS servers. Those DNS servers are long gone and I have added a WAN firewall rule to drop any TCP/UDP port 53 traffic…