topic Re: DNS NOT RESLOVING in Cloud Firewall

DNS NOT RESLOVING

siddu099 — Fri, 15 Aug 2025 17:48:40 GMT

Hi Experts,

I am using checkpoint 81.20 jumbo 99
dns is not resolving
ping 8.8.8.8 is working
ping google.com not resolving

show dns primary
8.8.8.8

show dns mode
default

Re: DNS NOT RESLOVING

the_rock — Fri, 15 Aug 2025 21:32:48 GMT

Maybe try quad 9 dns, 9.9.9.9 or 149.112.112.112

Whats output of curl_cli -k google.com?

Andy

Re: DNS NOT RESLOVING

Chris_Atkinson — Sat, 16 Aug 2025 04:30:14 GMT

What's the underlying platform, any other NSG / NACLs that might need adjusting?

Re: DNS NOT RESLOVING

siddu099 — Sun, 17 Aug 2025 14:59:44 GMT

Hi Team,

I am not getting any response for

curl_cli -k google.com

also cant able to ping 9.9.9.9

ping 9.9.9.9

PING 9.9.9.9 (9.9.9.9) 56(84) bytes of data.

--- 9.9.9.9 ping statistics ---

2 packets transmitted, 0 received, 100% packet loss, time 999ms

Re: DNS NOT RESLOVING

siddu099 — Sun, 17 Aug 2025 15:02:42 GMT

Hi Chris,

Its running on ESXI environment
we configured bgp in checkpoint
there is know restriction ACL for outgoing and incoming

Re: DNS NOT RESLOVING

the_rock — Sun, 17 Aug 2025 15:16:42 GMT

Do constant ping to 9.9.9.9 in one window and in the other one fw ctz zdebug + drop | grep 9.9.9.9

Re: DNS NOT RESLOVING

Chris_Atkinson — Mon, 18 Aug 2025 00:30:26 GMT

Please ensure that you've followed sk101214 if this is a cluster on ESXi.

Can you please share the routing table, do you see the routes with "netstat -rn" or "ip route"?

Re: DNS NOT RESLOVING

siddu099 — Mon, 18 Aug 2025 07:11:46 GMT

Hi Rock,

After adding the static route we can able to ping the dns
but we are using the x.x.x.x/29 in bgp
still we are facing the issue to ping some of public-ip

Re: DNS NOT RESLOVING

Chris_Atkinson — Mon, 18 Aug 2025 10:36:08 GMT

How does the Gateway receive it's default route, do you see it in the route table?