Hello,
I am getting sporadic (Host Not Found) errors on almost all my clients. This has been a continuing issue. After reading through all the posts on the BB I feel this is DNS related.
I am only Running Web Protection right now. Intrusion prevention is turned off.
I looked at tbrandl’s “Another Way” DNS routing below:
One way:
- Allowing DNS outgoing for your internal name servers
- internal name servers forwarding to ISP-DNS
- ASG pointing to internal name servers*
Another way:
- ASG forwarding to ISP-name servers
- "request routing" on ASG for internal domain pointing to internal name servers
- internal name servers forwarding to ASG
And I have modified it slightly to BAlfson’s DNS Best practices like this:
1. UTM Global Tab shows my “Internal Network”
2. On UTM, I set the DNS Forwards to use an availability group with hosts in this order:
192.168.x.x (This is the satellite modem)
Both Google DNS Servers then Both Open DNS Servers
3. On UTM[:$]n Request Routing Tab I have both the reverse Lookup Zone and Forward Lookup Zone for my local DNS Server listed
4. Same as 3.
5.Configured clients to point to my Local DNS Server first then The Astaro UTM next. I use static IPs on this network so DHCP configuration not helpful.
6. My local DNS Server first forward points to UTM and second points to Google 8.8.8.8
So my DNS rout is like this:
1 - UTM forwarding to ISP-name servers 1st then both Google then both Open DNS name servers in an availability group
2 - "request routing" on UTM for internal domain pointing to internal name server (Reverse and Forward Lookup zones)
3 - internal name server forwarding to UTM first then Google next
Note. In Step 1 – above I am actually pointing to the Satellite modem which in turn points to the satellite Internet provider’s name servers. This system is on a ship and I understand the name servers are dynamic depending on where in the ocean the ship happens to be and which satellite they are accessing at the time.
I am still getting “Host not found” messages. An excerpt from my Web Filter logs showing Host Not Found entries seen below:
Can anyone see what I am missing here?
Thanks for maintaining and contributing to this BB - Great Resource for all!
JP
avscantime="0" fullreqtime="292" device="0" auth="0" ua="Mozilla/5.0 (Windows NT 6.1; WOW64; rv:39.0) Gecko/20100101 Firefox/39.0" exceptions=""
2015:08:01-00:51:30 SophosOP httpproxy[5513]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.4.9" dstip="" user="" ad_domain="" statuscode="502" cached="0" profile="REF_HttProNoFilterin (No Filtering)" filteraction="REF_HttCffWideOpen (Wide Open)" size="2508" request="0xe35ef000" url="ichef.bbci.co.uk/.../39.0" exceptions=""
2015:08:01-00:51:30 SophosOP httpproxy[5513]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.4.9" dstip="" user="" ad_domain="" statuscode="502" cached="0" profile="REF_HttProNoFilterin (No Filtering)" filteraction="REF_HttCffWideOpen (Wide Open)" size="2506" request="0x11de2800" url="ichef.bbci.co.uk/.../39.0" exceptions=""
2015:08:01-00:51:30 SophosOP httpproxy[5513]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.4.9" dstip="" user="" ad_domain="" statuscode="502" cached="0" profile="REF_HttProNoFilterin (No Filtering)" filteraction="REF_HttCffWideOpen (Wide Open)" size="2502" request="0x11d44000" url="ichef.bbci.co.uk/.../39.0" exceptions=""
2015:08:01-00:51:30 SophosOP httpproxy[5513]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.4.9" dstip="" user="" ad_domain="" statuscode="502" cached="0" profile="REF_HttProNoFilterin (No Filtering)" filteraction="REF_HttCffWideOpen (Wide Open)" size="2502" request="0xe2306800" url="ichef.bbci.co.uk/.../39.0" exceptions=""
2015:08:01-00:51:30 SophosOP httpproxy[5513]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.4.9" dstip="" user="" ad_domain="" statuscode="502" cached="0" profile="REF_HttProNoFilterin (No Filtering)" filteraction="REF_HttCffWideOpen (Wide Open)" size="2502" request="0xe1902800" url="ichef.bbci.co.uk/.../39.0" exceptions=""
2015:08:01-00:51:30 SophosOP httpproxy[5513]: id="0002" severity="info" sys="SecureWeb" sub="http" name="web request blocked" action="block" method="GET" srcip="192.168.4.9" dstip="" user="" ad_domain="" statuscode="502" cached="0" profile="REF_HttProNoFilterin (No Filtering)" filteraction="REF_HttCffWideOpen (Wide Open)" size="2500" request="0x11c8d000"
This thread was automatically locked due to age.
