https://community.sophos.com/utm-firewall/f/management-networking-logging-and-reporting/33525/dns-forwardersI am currently having slow internet connectivity going through the Astaro 320 device, I have tested it not passing through the device and it is much faster set with a specific DNS server used in DNS settings on the pc. Can I put my internal DNS serversen-USTelligent Community 12https://community.sophos.com/thread/113184?ContentTypeID=1Wed, 04 Jan 2012 14:26:32 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:2538fefb-6fcf-4c6c-a773-265f0b943bb9William Warrenit&nbsp;isn&#39;t&nbsp;a&nbsp;law&nbsp;it&nbsp;is&nbsp;a&nbsp;decision&nbsp;by&nbsp;anti-spam&nbsp;providers.<br /><br />here&nbsp;is&nbsp;how&nbsp;to&nbsp;get&nbsp;around&nbsp;it&nbsp;and&nbsp;nOT&nbsp;screw&nbsp;up&nbsp;your&nbsp;anti-spam:<br /><br />leave&nbsp;everything&nbsp;be&nbsp;in&nbsp;the&nbsp;astaro&nbsp;as&nbsp;i&nbsp;noted&nbsp;above.<br />inside&nbsp;AD&nbsp;dns&nbsp;change&nbsp;the&nbsp;forwarders&nbsp;to&nbsp;the&nbsp;following:<br />forwarder&nbsp;number&nbsp;1&nbsp;is&nbsp;faster&nbsp;public&nbsp;dns&nbsp;server<br />forwarder&nbsp;number&nbsp;2&nbsp;is&nbsp;secdondary&nbsp;faster&nbsp;public&nbsp;dns&nbsp;server<br /><br />now&nbsp;you&nbsp;have&nbsp;faster&nbsp;dns&nbsp;for&nbsp;internal&nbsp;and&nbsp;you&nbsp;don&#39;t&nbsp;break&nbsp;anti-spam..[:)]<div style="clear:both;"></div>https://community.sophos.com/thread/113183?ContentTypeID=1Wed, 04 Jan 2012 14:22:48 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:0dbd9ddb-d55a-4eed-bd0d-f2f194885ed4drahthaarThank&nbsp;you&nbsp;for&nbsp;the&nbsp;info,&nbsp;&nbsp;I&nbsp;am&nbsp;aware&nbsp;all&nbsp;internal&nbsp;dns&nbsp;should&nbsp;go&nbsp;through&nbsp;AD&nbsp;or&nbsp;I&nbsp;won&#39;t&nbsp;have&nbsp;any&nbsp;network&nbsp;browsing,&nbsp;printers,&nbsp;etc. <br /> <br />I&nbsp;did&nbsp;not&nbsp;however&nbsp;know&nbsp;that&nbsp;I&nbsp;would&nbsp;be&nbsp;breaking&nbsp;any&nbsp;laws&nbsp;by&nbsp;using&nbsp;a&nbsp;public&nbsp;dns&nbsp;server&nbsp;in&nbsp;place&nbsp;of&nbsp;my&nbsp;ISP&nbsp;dns&nbsp;server. <br /> <br />I&nbsp;will&nbsp;probably&nbsp;leave&nbsp;well&nbsp;enough&nbsp;alone.&nbsp;&nbsp;The&nbsp;ISP&nbsp;are&nbsp;just&nbsp;slow&nbsp;and&nbsp;I&nbsp;will&nbsp;live&nbsp;with&nbsp;it.<div style="clear:both;"></div>https://community.sophos.com/thread/113182?ContentTypeID=1Wed, 04 Jan 2012 14:13:17 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:4dab4faa-904e-4fa0-aa3e-18a96d2d3e37William Warrenif&nbsp;you&nbsp;AD&nbsp;is&nbsp;doing&nbsp;dns&nbsp;slower&nbsp;then&nbsp;EVERYTHING&nbsp;is&nbsp;going&nbsp;to&nbsp;slow&nbsp;down&nbsp;not&nbsp;just&nbsp;external.&nbsp;&nbsp;Is&nbsp;your&nbsp;AD&nbsp;server&nbsp;overloaded?<br /><br />as&nbsp;to&nbsp;your&nbsp;AD&nbsp;dns&nbsp;configuration....that&nbsp;solution&nbsp;works&nbsp;as&nbsp;long&nbsp;as&nbsp;you&nbsp;do&nbsp;NOT&nbsp;use&nbsp;public&nbsp;dns&nbsp;in&nbsp;the&nbsp;astaro&nbsp;dns&nbsp;forwarder&nbsp;section..use&nbsp;your&nbsp;isp&nbsp;dns&nbsp;there...otherwsie&nbsp;you&nbsp;break&nbsp;anti-spam.&nbsp;&nbsp;allow&nbsp;me&nbsp;to&nbsp;detail:<br />network&nbsp;services---dns<br />global&nbsp;tab...have&nbsp;the&nbsp;internal&nbsp;(network)&nbsp;in&nbsp;there&nbsp;save&nbsp;changes<br />forwarders&nbsp;tab:&nbsp;put&nbsp;your&nbsp;isp&nbsp;dns&nbsp;servers&nbsp;in&nbsp;here&nbsp;save&nbsp;changes<br />Request&nbsp;routing&nbsp;tab:&nbsp;new&nbsp;dns&nbsp;request&nbsp;route&nbsp;button....domain:&nbsp;AD&nbsp;internal&nbsp;name&nbsp;here(mine&nbsp;is&nbsp;ecc.local)&nbsp;&nbsp;in&nbsp;target&nbsp;server&nbsp;create&nbsp;a&nbsp;network&nbsp;host&nbsp;definition&nbsp;for&nbsp;your&nbsp;ad&nbsp;server&nbsp;in&nbsp;here(if&nbsp;you&nbsp;have&nbsp;not&nbsp;already&nbsp;done&nbsp;so)&nbsp;click&nbsp;save.<br /><br />Done..[:)]<br /><br />&nbsp;if&nbsp;your&nbsp;AD&nbsp;is&nbsp;really&nbsp;slowing&nbsp;you&nbsp;down&nbsp;you&nbsp;really&nbsp;should&nbsp;figure&nbsp;out&nbsp;why&nbsp;that&nbsp;is&nbsp;happening.&nbsp;&nbsp;ALL&nbsp;internal&nbsp;dns&nbsp;needs&nbsp;to&nbsp;go&nbsp;through&nbsp;the&nbsp;AD&nbsp;server&nbsp;or&nbsp;the&nbsp;workstations&nbsp;are&nbsp;going&nbsp;to&nbsp;have&nbsp;all&nbsp;kinds&nbsp;of&nbsp;&quot;interesting&quot;&nbsp;problems.<div style="clear:both;"></div>https://community.sophos.com/thread/113181?ContentTypeID=1Wed, 04 Jan 2012 13:53:07 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:fe5eda09-4a32-4550-ab81-d84f844bab5edrahthaarI&nbsp;think&nbsp;the&nbsp;issue&nbsp;is&nbsp;that&nbsp;my&nbsp;internal&nbsp;DC&nbsp;is&nbsp;slower&nbsp;than&nbsp;the&nbsp;astaro&nbsp;at&nbsp;routing&nbsp;dns.<br /><br />I&nbsp;would&nbsp;like&nbsp;my&nbsp;DC&nbsp;to&nbsp;still&nbsp;route&nbsp;internal,&nbsp;but&nbsp;I&nbsp;don&#39;t&nbsp;want&nbsp;it&nbsp;routing&nbsp;external&nbsp;dns&nbsp;request.&nbsp;&nbsp;I&nbsp;think&nbsp;the&nbsp;ASG&nbsp;320&nbsp;would&nbsp;handle&nbsp;that&nbsp;better.<br /><br />So&nbsp;if&nbsp;I&nbsp;read&nbsp;your&nbsp;solution&nbsp;correctly,&nbsp;&nbsp;I&nbsp;would&nbsp;set&nbsp;the&nbsp;dns&nbsp;forwarder&nbsp;on&nbsp;the&nbsp;AD&nbsp;server&nbsp;to&nbsp;point&nbsp;to&nbsp;the&nbsp;Astaro,&nbsp;&nbsp;then&nbsp;I&nbsp;would&nbsp;let&nbsp;the&nbsp;Astaro&nbsp;route&nbsp;external&nbsp;dns&nbsp;traffic,&nbsp;based&nbsp;on&nbsp;dns&nbsp;servers&nbsp;I&nbsp;specify&nbsp;in&nbsp;the&nbsp;forwarders&nbsp;tab.&nbsp;<br /><br />I&nbsp;would&nbsp;accomplish&nbsp;this&nbsp;by&nbsp;routing&nbsp;in&nbsp;the&nbsp;Astaro?<div style="clear:both;"></div>https://community.sophos.com/thread/113180?ContentTypeID=1Wed, 04 Jan 2012 13:44:07 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:d264bf0d-bbab-47e9-82d9-2a1aac3e9476William Warrenok&nbsp;then&nbsp;here&#39;s&nbsp;how&nbsp;it&nbsp;is&nbsp;best&nbsp;to&nbsp;set&nbsp;it&nbsp;up<br /><br />set&nbsp;astaro&nbsp;dns&nbsp;forwarders&nbsp;to&nbsp;isp&nbsp;dns...then&nbsp;use&nbsp;dns&nbsp;routing&nbsp;tab&nbsp;to&nbsp;reroute&nbsp;ad&nbsp;requests&nbsp;BACK&nbsp;to&nbsp;the&nbsp;AD&nbsp;server.&nbsp;&nbsp;Have&nbsp;the&nbsp;AD&nbsp;server&nbsp;use&nbsp;the&nbsp;faster&nbsp;dns&nbsp;as&nbsp;it&#39;s&nbsp;primary&nbsp;and&nbsp;secondary&nbsp;dns&nbsp;and&nbsp;have&nbsp;it&nbsp;use&nbsp;the&nbsp;astaro&nbsp;as&nbsp;the&nbsp;third&nbsp;dns.&nbsp;&nbsp;This&nbsp;way&nbsp;AD&nbsp;will&nbsp;route&nbsp;internal&nbsp;dns&nbsp;correctly&nbsp;and&nbsp;bypass&nbsp;the&nbsp;astaro(and&nbsp;slower&nbsp;isp&nbsp;dns).&nbsp;&nbsp;Only&nbsp;if&nbsp;faster&nbsp;dns&nbsp;fails&nbsp;will&nbsp;it&nbsp;fall&nbsp;back&nbsp;to&nbsp;the&nbsp;asg...[:)]<div style="clear:both;"></div>https://community.sophos.com/thread/113179?ContentTypeID=1Wed, 04 Jan 2012 13:41:08 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:f1a07e13-e1dc-4f1c-aad8-f85351d3719bdrahthaarSorry,&nbsp;should&nbsp;have&nbsp;stated&nbsp;that&nbsp;up&nbsp;front,&nbsp;&nbsp;yes&nbsp;this&nbsp;is&nbsp;an&nbsp;AD&nbsp;environment.<div style="clear:both;"></div>https://community.sophos.com/thread/113178?ContentTypeID=1Wed, 04 Jan 2012 13:39:09 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:629dae4d-b4af-4af7-a084-fc40763e8c42William Warrendepends...do&nbsp;you&nbsp;ahve&nbsp;an&nbsp;active&nbsp;directory,&nbsp;ldap.&nbsp;or&nbsp;some&nbsp;other&nbsp;kind&nbsp;of&nbsp;network&nbsp;server&nbsp;in&nbsp;your&nbsp;network?&nbsp;&nbsp;if&nbsp;not&nbsp;then&nbsp;here&#39;s&nbsp;another&nbsp;questions:.&nbsp;&nbsp;are&nbsp;you&nbsp;using&nbsp;hte&nbsp;anti&nbsp;spam&nbsp;features&nbsp;of&nbsp;the&nbsp;firewall?&nbsp;&nbsp;if&nbsp;so&nbsp;then&nbsp;no..use&nbsp;the&nbsp;isp&nbsp;dns&nbsp;servers&nbsp;for&nbsp;the&nbsp;firewall.&nbsp;&nbsp;if&nbsp;you&nbsp;have&nbsp;a&nbsp;home&nbsp;network&nbsp;and&nbsp;are&nbsp;only&nbsp;using&nbsp;the&nbsp;firewall&nbsp;for&nbsp;dns&nbsp;AND&nbsp;NOT&nbsp;using&nbsp;antispam&nbsp;on&nbsp;the&nbsp;firewal&nbsp;then&nbsp;you&nbsp;can&nbsp;put&nbsp;public&nbsp;dns&nbsp;into&nbsp;the&nbsp;forwarders.<div style="clear:both;"></div>