Local DNS queries going upstream

Follow

cphinx

• December 11, 2023 00:27
• Edited

Hi everyone,

Just happened to notice in our upstream DNS servers (we use a content filtering/DNS service) that local (in-arpa) queries are getting sent upstream by Firewalla.

I'm making a broad assumption this isn't normal as we didn't see it until switching to Firewalla and I recall in previous firewalls/DNS servers there were settings to "never send local DNS upstream".

Thoughts?

(Screen shot is from our upstream DNS filtering service showing the 192.in-addr.arpa lookups)


Edit: This particular Firewalla box has DoH turned off and Adblock on.  Upstream DNS is set at the WAN interface.

0

• 

  Michael Bierman

  • December 11, 2023 00:28

  How are your WAN and LAN DNS settings -are  in Firewalla? I assume you are not using Unbound—are you using DoH?

  0

  Comment actions Permalink
• 

  cphinx

  • December 11, 2023 00:29
  • Edited

  Added that edit after I posted.  No unbound or DoH.  Upstream DNS is set at the WAN interface, LAN is pointing to Firewalla.  Adblock is turned on though, although I don't see that having an impact either way.

  0

  Comment actions Permalink

Please sign in to leave a comment.