topic Re: DNS queries on specific IF on VSX in General Topics

DNS queries on specific IF on VSX

AkosBakos — Wed, 11 Dec 2024 09:55:20 GMT

Hi CheckMates,

I have a curious question about DNS queries:

The DNS queries leave the VS according to the Topology table. Im my case this IP is the IP of transit LANinterface. So this network is not routed anywhere. Is there any possibility to determinate the source IP of the DNS query which started from the VS?

My first idea is NAT the DNS query, but I turn to the Legends, maybe they have something interesting.

Akos

Re: DNS queries on specific IF on VSX

PhoneBoy — Wed, 11 Dec 2024 15:44:12 GMT

NAT is actually what @CheckMatesAI said to do, FWIW.

Re: DNS queries on specific IF on VSX

Lesley — Thu, 12 Dec 2024 03:55:30 GMT

Maybe with tcpdump you can find the request? Not sure if the request is just one dns name or many. Make sure to exclude the interface where it will be send out. You think the source is the gateway itself, clients or a dns server?
You cannot see requested dns names in the logs. Back in the day this was possible I think.

Re: DNS queries on specific IF on VSX

AkosBakos — Thu, 12 Dec 2024 08:26:52 GMT

We resolved the issue with NAT.