topic Re: DNS from the Gateway when using it as a proxy in General Topics https://community.checkpoint.com/t5/General-Topics/DNS-from-the-Gateway-when-using-it-as-a-proxy/m-p/16988#M2842 <HTML><HEAD></HEAD><BODY><P>Maybe DNS cache issue ?</P></BODY></HTML> Tue, 18 Dec 2018 08:47:50 GMT G_W_Albrecht 2018-12-18T08:47:50Z DNS from the Gateway when using it as a proxy https://community.checkpoint.com/t5/General-Topics/DNS-from-the-Gateway-when-using-it-as-a-proxy/m-p/16987#M2841 <HTML><HEAD></HEAD><BODY><P>Yesterday we had one customer that was experiencing no internet access for 2 hours. It was resolved by itself. Looking into the logs (afterwards) I found there were lots of requests to the proxy address but there was no requests going from the gateway to the internet.</P><P>DNS setting is for 3 different DNS servers, however it seems there was no other DNS server used but the first one in the list, is this something anyone else has seen/experienced?</P></BODY></HTML> Tue, 18 Dec 2018 06:41:08 GMT https://community.checkpoint.com/t5/General-Topics/DNS-from-the-Gateway-when-using-it-as-a-proxy/m-p/16987#M2841 Maarten_Sjouw 2018-12-18T06:41:08Z Re: DNS from the Gateway when using it as a proxy https://community.checkpoint.com/t5/General-Topics/DNS-from-the-Gateway-when-using-it-as-a-proxy/m-p/16988#M2842 <HTML><HEAD></HEAD><BODY><P>Maybe DNS cache issue ?</P></BODY></HTML> Tue, 18 Dec 2018 08:47:50 GMT https://community.checkpoint.com/t5/General-Topics/DNS-from-the-Gateway-when-using-it-as-a-proxy/m-p/16988#M2842 G_W_Albrecht 2018-12-18T08:47:50Z Re: DNS from the Gateway when using it as a proxy https://community.checkpoint.com/t5/General-Topics/DNS-from-the-Gateway-when-using-it-as-a-proxy/m-p/16989#M2843 <HTML><HEAD></HEAD><BODY><P>There was a 2 hour outage, we found SK140612, where it is stated the proxy process sends requests to all configured DNS servers, plus that the first responding DNS servers answer is used and the other answers are discarded. So when the first responding server returns a bogus response, the rest is discarded and no proper responses will be received in time.</P><P>In the WSDNSD file we see a lot of these messages:</P><P></P><P>wsdns_monitor_init: registering active monitoring<BR /> wsdns_monitor_init: got process ID: 15958<BR /> wsdns_monitor_set_signal: called with signal=10<BR /> wsdns_monitor_init: registered monitor. RC: 0<BR /> wsdns_signals_init: daemon signals initiated successfully<BR /> wsdns_resolver_init: called<BR /> main: daemon entering loop...<BR /> Failed to open file 'fw_cmd.tmp': Too many open files<BR />[wsdnsd 23719 4136200400]@GW1[17 Dec 14:14:57] wsdnsd: Mon Dec 17 14:14:57 2018</P><P></P><P>wsdns_monitor_init: registering active monitoring<BR /> wsdns_monitor_init: got process ID: 23719<BR /> wsdns_monitor_set_signal: called with signal=10<BR /> wsdns_monitor_init: registered monitor. RC: 0<BR /> wsdns_signals_init: daemon signals initiated successfully<BR /> wsdns_resolver_init: called<BR /> main: daemon entering loop...<BR /> Failed to open file 'fw_cmd.tmp': Too many open files<BR />[wsdnsd 17889 4135504080]@GW1[17 Dec 17:04:46] wsdnsd: Mon Dec 17 17:04:46 2018</P><P></P><P>Weird thing is that at the exact same time of the last entry the internet access was restored.</P></BODY></HTML> Tue, 18 Dec 2018 08:57:41 GMT https://community.checkpoint.com/t5/General-Topics/DNS-from-the-Gateway-when-using-it-as-a-proxy/m-p/16989#M2843 Maarten_Sjouw 2018-12-18T08:57:41Z