DNS proxy errors

[Jatin.Singh]

We are using PANOS 9.1 and latest DNS security. Any thoughts on these errors from proxy log? 172.16.1.1 and 172.16.1.3 are Microsoft AD DNS servers.Can these be effecting performance of traffic?

2020-02-17 08:30:23.583 +1100 Error:  pan_dnsproxy_recv_server_udp_cb(pan_dnsproxy_udp.c:222): [udp]: fd 48 from 172.16.1.1 to 0.0.0.0 process server failed!

2020-02-17 08:30:24.490 +1100 Error:  pan_dnsproxy_process_server_pkt(pan_dnsproxy_pkt.c:1491): [DNS Proxy/21572/12452/-]:[Drop Rcvd Server Pkt]: invalid UDP socket!

2020-02-17 08:30:24.490 +1100 Error:  pan_dnsproxy_recv_server_udp_cb(pan_dnsproxy_udp.c:222): [udp]: fd 56 from 172.16.1.1 to 0.0.0.0 process server failed!

[SutareMayur]

@Jatin.Singh  Is dns proxy working fine?

There are multiple reasons for this error logs. There may be delay in DNS server response or there is no response. Can you please share output of below command?

show dns-proxy statistics all

Mayur

[Jatin.Singh]

@SutareMayur 

 I have been doing this during the day today and its much higher, pending I have seen sometimes 200

Name: DNS Proxy

Interfaces: ethernet1/1 Counters:

  Queries received from hosts:1570853

  Responses returned to hosts:1554168

  Queries forwarded to servers:1325157

  Responses received from servers:918352

  Pending TCP:0

  Pending UDP:4

--------------------------------------

admin@Bialik-PA01> show dns-proxy statistics all

Name: DNS Proxy

Interfaces: ethernet1/1 Counters:

  Queries received from hosts:1570861

  Responses returned to hosts:1554176

  Queries forwarded to servers:1325163

  Responses received from servers:918357

  Pending TCP:0

  Pending UDP:4

--------------------------------------

[Jatin.Singh]

Seen at low use time, same error -- 2020-02-17 16:37:46.841 +1100 Error:  pan_dnsproxy_recv_server_udp_cb(pan_dnsproxy_udp.c:222): [udp]: fd 18 from 172.16.1.1 to 0.0.0.0 process server failed!

& why Failed to resolve domain name:updates.paloaltonetworks.com AAAA after trying all attempts to name server(s): 208.67.222.222  208.67.222.220??

2020-02-17 16:35:14.933 +1100 Warning:  pan_dnsproxy_log_resolve_fail(pan_dnsproxy_util.c:651): Failed to resolve domain name:updates.paloaltonetworks.com AAAA after trying all attempts to name server(s): 208.67.222.222  208.67.222.220

2020-02-17 16:36:14.933 +1100 Warning:  pan_dnsproxy_log_resolve_fail(pan_dnsproxy_util.c:651): Failed to resolve domain name:updates.paloaltonetworks.com AAAA after trying all attempts to name server(s): 208.67.222.222  208.67.222.220

[SutareMayur]

@Jatin.SinghWhat do you see in traffic logs? Is it allowing dns queries ?

Mayur

[Shakemustafa]

Hi Everyone,

I am also facing the same issue, Please help me if any resolution.

[Nisha_Bharadia]

I am also having this issue? any ideas what this could be related too?

Queries received from hosts:6812
Responses returned to hosts:0
Queries forwarded to servers:81744
Responses received from servers:0
Pending TCP:0
Pending UDP:0