Browse Community
Help
Log In
Responses(2)
Solutions(0)
DELL-Josh Cr
Moderator
•
9.5K Posts
0
October 12th, 2020 09:00
Hi SerkanUlker,
DNS will fallback to TCP if UDP fails. Try creating a rule for TCP as well.
SerkanUlker
2 Posts
October 16th, 2020 05:00
Hi Josh Cr
ı changed the ACL like this, and I check it.
ip access-list DNS-BLOCK-NEWpermit udp any 192.168.0.2 0.0.0.0 eq domainpermit udp any 192.168.0.3 0.0.0.0 eq domainpermit udp any 192.168.36.42 0.0.0.0 eq domainpermit tcp any 192.168.0.2 0.0.0.0 eq domainpermit tcp any 192.168.0.3 0.0.0.0 eq domainpermit tcp any 192.168.36.42 0.0.0.0 eq domaindeny udp any any eq domain logdeny tcp any any eq domain logpermit everyexit
Dell Support Resources
View All
Top
DELL-Josh Cr
Moderator
•
9.5K Posts
0
October 12th, 2020 09:00
Hi SerkanUlker,
DNS will fallback to TCP if UDP fails. Try creating a rule for TCP as well.
SerkanUlker
2 Posts
0
October 16th, 2020 05:00
Hi Josh Cr
ı changed the ACL like this, and I check it.
ip access-list DNS-BLOCK-NEW
permit udp any 192.168.0.2 0.0.0.0 eq domain
permit udp any 192.168.0.3 0.0.0.0 eq domain
permit udp any 192.168.36.42 0.0.0.0 eq domain
permit tcp any 192.168.0.2 0.0.0.0 eq domain
permit tcp any 192.168.0.3 0.0.0.0 eq domain
permit tcp any 192.168.36.42 0.0.0.0 eq domain
deny udp any any eq domain log
deny tcp any any eq domain log
permit every
exit