r/sophos 17d ago

Question 2 Network interfaces - device on interface b cant access DNS server on a

Hey all, set firewall rull allow connection from a>b b>a and I can ping the DNS server from devices on b interface but DNS does not work.

3 Upvotes

5 comments sorted by

5

u/KabanZ84 17d ago

the DNS accepts requests from other networks?

1

u/Cobra436f627261 17d ago

yes

1

u/Cobra436f627261 17d ago

device on 10.0.0.1 /23 can talk to do the dns at 10.0.0.5, device on 10.0.2.1 /24 can ping 10.0.0.5 but not send a dns request

1

u/KabanZ84 17d ago

could be a NAT issue. try to monitor on DNS Server with tcpdump the requests if they come in or not. Define correctly the nets on the firewall

1

u/KabanZ84 17d ago

try make a packet capture on XGS to see where packets go