PDA

View Full Version : DNS path through


rhysw
11-21-2007, 05:35 PM
Can port 53 TCP and UDP be forward to a DNS inside the quadro network? I think I need to turn off the quadro DNS server, at least on the WAN side. Can this be done?

Thanks
Rhys

davrays
11-22-2007, 01:25 AM
Rhys, there is no need to turn off the Quadro's DNS server on WAN side - you can just don't use thatsmileys/smiley1.gif.


I am not even sure, but I think Quadro's DNS server doesn't respond to requests from WAN: nobody need that. The DNS server on Quadro is for LAN only. Edited by: davrays

rhysw
11-23-2007, 09:23 AM
I've added 2 services:






DNSTCP


TCP


53-53






DNSUDP


UDP


53-53
and set up port forwarding.






Enabled


User: DNSUDP


Allowed


Any


192.168.0.100:53









Enabled


User: DNSTCP


Allowed


Any


192.168.0.100:53



When I telnet externally to our static IP on port 53 there is no answer. suggesting this forwarding is not working..

Can anyone help?


Edited by: rhysw

davrays
11-26-2007, 01:59 AM
Not sure about UDP, but Port Forwarding from TCP port 53 works - I forwarded Quadro's TCP port 53 to port 80 of my Snom, and it works ok - I can open Snom's management webpage when connecting from WAN to "<myQuadrosIP>:53".


Probably your DNS server (192.168.0.100) doesn't listen on TCP port 53.Edited by: davrays

threebit
11-26-2007, 11:17 AM
I performed this test using UDP and did the packet capture on the Quadro's LAN interface. I could see the DNS requests being passed through to the internal device - however my nslookup tests were timing out.
In my case it is because the internal DNS server has a different default gateway than the Quadro that was doing the port forwarding, and so DNS reply packets were not returning to my client PC.

However, it looks like the Quadro is forwarding the packets as it should be.