DOMAIN (udp/53) (2024)

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

• 

  0BarryGover 9 years ago

  Hi,areyourunningIPv6ontheUTMandyournetworks?

  Ifyou'renot,ignorethemorsetuparuletodropthemwithoutlogging.

  Barry

  See Also

  myF5TCP/IP Network AdministrationTCP vs. UDP: What’s the Difference?Remote Management Settings

  • Cancel

  • Vote Up0Vote Down
  • Cancel

• 

  0bimmerdriverover 9 years agoin reply to BarryG

  I'mfollowinguponthis.I'mseeingDOMAIN(udp/53)trafficfromseveralofthecomputersonmyinternalnetworkdirectedtowardutm,mostlyonipv6,butalsosomeonipv4.I'dliketomakearuletoallowthistraffic.ShouldIexplicitlyidentifytheipv4andipv6addressofutmasthedestination?ShouldIusetheinternalnetworkasthesource?Thanks.

  • Cancel

  • Vote Up0Vote Down
  • Cancel

• 

  See Also

  What is sms agent host service

  0bimmerdriverover 9 years agoin reply to bimmerdriver

  Icreatedarule,internalnetwork>DNS>InternalAddress.Itdoesn'tseemtobedoinganything.Theaddressesarealllinklocalipv6andipv4toutm.HowdoIallowthistraffic?

  • Cancel

  • Vote Up0Vote Down
  • Cancel

• 

  0TheDrewover 9 years ago

  AddthenetworkstotheallowedlistontheDNSconfigurepage?Addingsubnetstherewillcreatehiddenallowrulesinthefirewall.

  Linklocaladdressusesthefe80::rangeifIrecall.

  • Cancel

  • Vote Up0Vote Down
  • Cancel

• 

  0bimmerdriverover 9 years agoin reply to TheDrew

  Ilookedbackoverthelast30daysandinterestinglynoticedthatthetrafficisfrombothipv4andipv6link-localaddresses,aswellasipv4andipv6internaladdresses.Therewasonlyoneblockedpacketfromanaddressoutsidetheinternalnetworkoutofalmost100kpackets.Ialsofoundthesourceoftheipv6link-localpackets.Theyareandroidphones.Notsureabouttheipv4linklocaladdresses(169.254/16).

  Icreatedanetworkcalledlink-localwith169.254/16andfe80::/64,andaddedittotheDNS.SinceIaddedit,therehavebeenacoupleofblockedpackets,soperhapsthat'snottheanswer.I'llrunitovernightandseewhathappens.MaybeIhavetoaddthelink-localnetworkasasourcetothefirewallrulethatpassestheport53traffic.

  • Cancel

  • Vote Up0Vote Down
  • Cancel

• 

  0bimmerdriverover 9 years agoin reply to bimmerdriver

  I'mhappytosaythataddingtheipv4andipv6link-localaddressrangestothelistofalloweddnsnetworksseemstohavecuredtheproblemwiththeblockeddnspackets.Thanksforthehelp.

  • Cancel

  • Vote Up0Vote Down
  • Cancel