Quantcast
Channel: Sophos User Bulletin Board
Viewing all articles
Browse latest Browse all 14361

Rcode Refused Stumped......

$
0
0
All-

I continue to receive rcode refused entries in the DNS proxy log. This has been going on since the upgrage to UTM 9. Changing the MTU, DNS forwarders, using the ISP DNS did not solve the issue. Review of the log shows this going on in the middle of the night when nothing is active. I have gone as far as to remove everything from the network leaving only the ASG connected and still receive the same messages. Ocasionally the log will be empty, but not very often. The enclosed log shows addresses from China which I have blocked. More commonly I see IP's from google. The question now becomes is this a DNS bind problem, and how do I correct it?:confused: I use POP3 email however I do not use any of the proxies. Researching this on the internet indicates a DNS bind problem. While it appears to very common from a research perspective, it may not be with ASG. Otherwise there would be more postings. One othe note, I am using DNS best practice in my configuration. I am grateful for any help provided.


Kind Regards,
Jim





2012:08:18-01:32:07 OASIS named[4114]: unexpected RCODE (REFUSED) resolving '246.210.192.120.in-addr.arpa/PTR/IN': 211.136.17.105#53
2012:08:18-01:32:09 OASIS named[4114]: unexpected RCODE (REFUSED) resolving '246.210.192.120.in-addr.arpa/PTR/IN': 211.136.20.201#53
2012:08:18-01:47:16 OASIS named[4114]: unexpected RCODE (REFUSED) resolving '246.210.192.120.in-addr.arpa/PTR/IN': 211.136.20.201#53
2012:08:18-01:47:17 OASIS named[4114]: unexpected RCODE (REFUSED) resolving '246.210.192.120.in-addr.arpa/PTR/IN': 211.136.17.105#53
2012:08:18-02:02:10 OASIS named[4114]: unexpected RCODE (REFUSED) resolving '62.210.206.120.in-addr.arpa/PTR/IN': 211.136.20.201#53

Viewing all articles
Browse latest Browse all 14361

Trending Articles