Trying the DNSProxy feature for Static Response

ocpfn4 — Wed, 24 Dec 2025 19:59:42 GMT

Hie,

Situation - Wanted to kaminsky the DNS Responses for my client from the FW
Complication - None of the dig are responded

Need your help on this?

Client Requests for Promise/Spoofed IP

keviv@keviv-VMware-Virtual-Platform:~$ ifconfig ens37
ens37: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.21.21 netmask 255.255.255.0 broadcast 192.168.21.255
inet6 fe80::355a:6e06:90e9:6b84 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:80:6e:57 txqueuelen 1000 (Ethernet)
RX packets 7725 bytes 677203 (677.2 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 7358 bytes 686142 (686.1 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

keviv@keviv-VMware-Virtual-Platform:~$ dig @192.168.20.130 fallout.gcc
;; communications error to 192.168.20.130#53: timed out
;; communications error to 192.168.20.130#53: timed out
;; communications error to 192.168.20.130#53: timed out

; <<>> DiG 9.18.39-0ubuntu0.24.04.2-Ubuntu <<>> @192.168.20.130 fallout.gcc
; (1 server found)
;; global options: +cmd
;; no servers could be reached
keviv@keviv-VMware-Virtual-Platform:~$ dig @192.168.21.20 fallout.gcc
;; communications error to 192.168.21.20#53: timed out
;; communications error to 192.168.21.20#53: timed out
;; communications error to 192.168.21.20#53: timed out

; <<>> DiG 9.18.39-0ubuntu0.24.04.2-Ubuntu <<>> @192.168.21.20 fallout.gcc
; (1 server found)
;; global options: +cmd
;; no servers could be reached
keviv@keviv-VMware-Virtual-Platform:~$

Firewall Config

admin@panama# show network dns-proxy astroid
astroid {
cache {
max-ttl {
enabled no;
}
enabled yes;
}
tcp-queries {
enabled no;
}
static-entries {
cachepoisioning {
address 192.168.20.129;
domain fallout.gcc;
}
}
interface [ ethernet1/1 ethernet1/2];
default {
primary 192.168.20.130;
}
enabled yes;
}
[edit]
admin@panama#

admin@panama> show interface ethernet1/1
Interface IP address: 192.168.20.130/24

admin@panama> show interface ethernet1/2
Interface IP address: 192.168.21.20/24

admin@panama> show dns-proxy cache name astroid

Name: astroid
Cache settings:
cache-edns: enabled
entries: 0
Domain IP/Name Type Class TTL Hits
-----------------------------------------------------------------------------------------------------------------------------

admin@panama>

There is currently all allow policy ord.

Any suggestions or hint will be welcomed.
Chao

topic Trying the DNSProxy feature for Static Response in General Topics

Trying the DNSProxy feature for Static Response