topic DNS Proxy in R81.20 in Firewall and Security Management

DNS Proxy in R81.20

HristoGrigorov — Mon, 24 Jun 2024 05:43:48 GMT

Hi,

I am not sure DNS Proxy in R81.20 is properly implemented for Primary/Backup ISP Redundancy mode.

For a single host it returns IPs for all the configured ISPs. I think it is more correct to return only one IP for the currently Active ISP.

Why? Because if your backup ISP is a much slower connection or a broadband that costs money, you don't want connections coming to it unless really necessary.

Re: DNS Proxy in R81.20

PhoneBoy — Mon, 24 Jun 2024 19:24:59 GMT

Sounds like it might require an RFE, though.

Re: DNS Proxy in R81.20

HristoGrigorov — Tue, 02 Jul 2024 05:15:20 GMT

Wow, this was fast! Already fixed in Take 70:

PRJ-51460,
PRHF-31473

Security Gateway

When using three or more ISP DNS proxies in High Availability mode and Load Sharing mode:

A DNS query to any ISP returns IP addresses of all three, although it should return only the active ISP.
When one ISP is down, the faulty ISP is also returned instead of the newly active.