Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 11313 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

unexpected RCODE (REFUSED)

techuser
Hi 
what is the meaning of  these messages in the DNS log file
unexpected RCODE (REFUSED) resolving 'www-google-analytics.l.google.com/A/IN': ip address#53
unexpected RCODE (REFUSED) resolving 'cffs09.astaro.com/A/IN': ip address#53
unexpected RCODE (REFUSED) resolving 'cffs04.astaro.com/AAAA/IN': ip address#53

the ip address is the ISP proxy
the problem is when this message appears we can't access the internet 

Thanks


This thread was automatically locked due to age.
Parents
  • 0
    I haven't seen this.  Normally, I only see "RCODE (REFUSED) resolving" messages where the SMTP Proxy rejected an email because the sender's domain failed the RDNS test.  I'll guess that your 'Content Filter (HTTP)' log shows blocked surf requests at the same time.

    Have you tried using other DNS services?  We use OpenDNS (208.67.220.220 & 208.67.222.222).  You also might try the Google public servers (8.8.8.8 & 8.8.4.4).

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    I haven't seen this.  Normally, I only see "RCODE (REFUSED) resolving" messages where the SMTP Proxy rejected an email because the sender's domain failed the RDNS test.  I'll guess that your 'Content Filter (HTTP)' log shows blocked surf requests at the same time.

    Have you tried using other DNS services?  We use OpenDNS (208.67.220.220 & 208.67.222.222).  You also might try the Google public servers (8.8.8.8 & 8.8.4.4).

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson

    Have you tried using other DNS services?  We use OpenDNS (208.67.220.220 & 208.67.222.222).  You also might try the Google public servers (8.8.8.8 & 8.8.4.4).
    Cheers - Bob


    yes I tried openDNS but still the same problem
    I searched this error and it seems that if the size of the udp packet is bigger than 512 bytes the firewall or proxy can't handle it
    but I don't know how to fix it
Unfiltered HTML