Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Control » Dynamic DNS resolution not working
  •  
UKortkamp

Messages: 15
Karma: 0
Send a private message to this user
Hello at all,
we have a great problem with KWF 6.2.1 build 1454.
KWF runs on a 2003 MemberServer with DNS Forwarder enabled.

Address Group Definition "TRUSTED-GROUP" contains some "host1/2/3 .DynDNS.org" names.

Traffic Rule wich allows all traffic to "TRUSTED-GROUP".

If IP of DynDNS Host change it will take much time until KWF recognized these change (until this point it will block all traffic to these hosts).

The funny thing is.... if we try "nsLookUp host.dyndns.org" against KWF Host we get the right, NEW IP - but traffic is blocked.

Tried several things without success:
- enabled / disabled "cache for faster response" (each with "Clear Cache")
- custom forwarding to direct *.dyndns.org query directly to ns1.dyndns.org Nameserver

has someone an idea how to fix this problem ?

Kind regards
Uwe
  •  
UKortkamp

Messages: 15
Karma: 0
Send a private message to this user
i think, i have found the solution by myself....
For all who has the same problem...

For this scenario don't use a group to define the dynamic DNS Hosts... write the HostNames directly into the traffic rule under Destination.

Address Group's seems only to work with fixed IP's.

Regard
Uwe
  •  
winkelman

Messages: 2119
Karma: 3
Send a private message to this user
Please do submit a bug report on this. If you're right (and I'm not doubting you), this is a bug and should be fixed!
  •  
Kerio_ktrumbull

Messages: 597
Karma: 2
Send a private message to this user
UKortkamp wrote on Mon, 10 July 2006 00:58

If IP of DynDNS Host change it will take much time until KWF recognized these change (until this point it will block all traffic to these hosts).

Unfortunately this is a known issue. Currently KWF only looks up a hostname during startup of the engine, or upon change of the traffic policy.

Please do submit a ticket regarding this: http://support.kerio.com

Kevin Trumbull
Kerio Technical Support Team Leader
http://support.kerio.com
Previous Topic: Macintosh VPN Client?
Next Topic: Bearshare and Mirc
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Mon Nov 20 07:07:00 CET 2017

Total time taken to generate the page: 0.00417 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.