topic Re: How to edit hosts file on Quantum Spark 1590 Appliance in Spark Firewall (SMB)

How to edit hosts file on Quantum Spark 1590 Appliance

gcarella — Fri, 23 Jul 2021 17:06:21 GMT

Hi all,

I have a simple question to ask to the community. How I can set permanently an entry on the hosts file of the firewall?

My setup is a 1590 Quantum Spark appliance running R80.20.25.

I need to resolve a specific FQDN into a specific IP and not using public DNS servers.

There is no way to do this from GUI, also clish commands are not working or accepted.

So I've tried to edit /etc/hosts file in expert mode, but any change is overwritten automatically after some time. When I write inside /etc/hosts file an entry, this works only for some time. After a while it's overwritten and deleted reverting back the file to default.

Any idea?

Thank you,

Gianluigi Carella

Re: How to edit hosts file on Quantum Spark 1590 Appliance

PhoneBoy — Sat, 24 Jul 2021 20:30:29 GMT

Editing certain underlying Unix files like that is not supported.
You need to create a specific object for that FQDN either in the WebUI or via the add host CLI command.

Re: How to edit hosts file on Quantum Spark 1590 Appliance

gcarella — Mon, 26 Jul 2021 12:32:50 GMT

OK but I've tried using a network object and it doesn't work.

When I try to ping the FQDN the IP is resolved with the public IP and not the private one that I have explicitly configured in the network object.

What I'm doing wrong?

Thanks.

Re: How to edit hosts file on Quantum Spark 1590 Appliance

PhoneBoy — Mon, 26 Jul 2021 15:55:55 GMT

Is an entry being created in the /etc/hosts file when you create the object?
It is for me when I do it on R80.20.30 firmware anyway.

Re: How to edit hosts file on Quantum Spark 1590 Appliance

gcarella — Wed, 28 Jul 2021 02:38:55 GMT

tried many times, but /etc/hosts doesn't reflect what I've configured as network object.

Re: How to edit hosts file on Quantum Spark 1590 Appliance

Tom_Hinoue — Wed, 28 Jul 2021 03:19:33 GMT

Do you have [Enable DNS Proxy] and [Resolve Network Objects] checked in global DNS settings?

Also not to forget to check [Allow DNS server to resolve this object name] on your network object, and it should work.

Re: How to edit hosts file on Quantum Spark 1590 Appliance

gcarella — Thu, 29 Jul 2021 12:25:21 GMT

Yeah. This works for me. The solution was for all this time under my eyes.

Re: How to edit hosts file on Quantum Spark 1590 Appliance

Check07090 — Mon, 02 Jan 2023 10:08:11 GMT

After doing [Enable DNS Proxy] and [Resolve Network Objects] checked in global DNS settings and [Allow DNS server to resolve this object name] on network object, do we still need to make the entries in /etc/hosts file...? Or only making these settings on firewall level only will resolve the DNS since after these settings on firewall level only, I am not able to ping the network object from my desktop while in firewall DNS lookup, object is resolving the IP...

Can any one plz help here...

Re: How to edit hosts file on Quantum Spark 1590 Appliance

G_W_Albrecht — Mon, 02 Jan 2023 11:58:32 GMT

No, entries in firewall /etc/hosts file are defined in WebGUI. Did you look at the hops ?

Re: How to edit hosts file on Quantum Spark 1590 Appliance

Check07090 — Mon, 02 Jan 2023 13:12:06 GMT

While checking by tracert in command prompt it is showing as 'Unable to resolve target system name xyz.in' 😕

Re: How to edit hosts file on Quantum Spark 1590 Appliance

Check07090 — Sun, 19 Feb 2023 14:09:47 GMT

I just got it work... Since I have manually entered the Google DNS (8.8.8.8) on end user nodes that's why it was not resolving the network objects of CP firewall. Now I mentioned the gateway address in DNS and it starts working...😃

If I don't mention the gateway address in DNS on end user node on ethernet then it doesn't work. Please suggest that mentioning the gateway address in DNS on end user node ethernet is good idea ...?

Re: How to edit hosts file on Quantum Spark 1590 Appliance

Chris_Atkinson — Sun, 19 Feb 2023 21:55:56 GMT

Setting the gateway LAN IP in the client DNS settings is a requirement for DNS proxy to work, correct.