Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 20 replies
  • Subscribers 1 subscriber
  • Views 42255 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

dnsbl.proxybl.org offline?

dcline97
This morning I got a bunch of calls about all of our websites/portals taking 20+ seconds to load a page.  I jumped on our web server and it was running fine so I logged into the UTM and opened the WAF live log and saw a ton of these for every page request:

DNS lookup for 83.16.168.192.dnsbl.proxybl.org. failed

This the the dns reputation lookup that we current have turned on.  It appears that proxybl.org has had it's DNS wiped out!

I have temporarily turned off the reputation lookup and things are again running normal.  Just thought I would share in case anyone else is experiencing this.

Dave


This thread was automatically locked due to age.
Parents
  • 0
    What has been the official vendor support analysis and workaround for this situation?
  • 0 in reply to teched_01
    I was the one that reported the issue and workaround to Sophos Support.  Following Teched's (your) scripts will correct the issue.

    To date no official response other than "thanks for the info."  I'm sure they have an internal KB article on this their techs use to fix the problem if someone calls in about it.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • 0 in reply to teched_01
    I was the one that reported the issue and workaround to Sophos Support.  Following Teched's (your) scripts will correct the issue.

    To date no official response other than "thanks for the info."  I'm sure they have an internal KB article on this their techs use to fix the problem if someone calls in about it.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data
Unfiltered HTML