Trying the DNSProxy feature for Static Response

[ocpfn4]

Hie,

Situation - Wanted to kaminsky the DNS Responses for my client from the FW
Complication - None of the dig are responded

Need your help on this?

Client Requests for Promise/Spoofed IP

keviv@keviv-VMware-Virtual-Platform:~$ ifconfig ens37
ens37: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.21.21 netmask 255.255.255.0 broadcast 192.168.21.255
inet6 fe80::355a:6e06:90e9:6b84 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:80:6e:57 txqueuelen 1000 (Ethernet)
RX packets 7725 bytes 677203 (677.2 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 7358 bytes 686142 (686.1 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

keviv@keviv-VMware-Virtual-Platform:~$ dig @192.168.20.130 fallout.gcc
;; communications error to 192.168.20.130#53: timed out
;; communications error to 192.168.20.130#53: timed out
;; communications error to 192.168.20.130#53: timed out

; <<>> DiG 9.18.39-0ubuntu0.24.04.2-Ubuntu <<>> @192.168.20.130 fallout.gcc
; (1 server found)
;; global options: +cmd
;; no servers could be reached
keviv@keviv-VMware-Virtual-Platform:~$ dig @192.168.21.20 fallout.gcc
;; communications error to 192.168.21.20#53: timed out
;; communications error to 192.168.21.20#53: timed out
;; communications error to 192.168.21.20#53: timed out

; <<>> DiG 9.18.39-0ubuntu0.24.04.2-Ubuntu <<>> @192.168.21.20 fallout.gcc
; (1 server found)
;; global options: +cmd
;; no servers could be reached
keviv@keviv-VMware-Virtual-Platform:~$

Firewall Config

admin@panama# show network dns-proxy astroid
astroid {
cache {
max-ttl {
enabled no;
}
enabled yes;
}
tcp-queries {
enabled no;
}
static-entries {
cachepoisioning {
address 192.168.20.129;
domain fallout.gcc;
}
}
interface [ ethernet1/1 ethernet1/2];
default {
primary 192.168.20.130;
}
enabled yes;
}
[edit]
admin@panama#

admin@panama> show interface ethernet1/1
Interface IP address: 192.168.20.130/24

admin@panama> show interface ethernet1/2
Interface IP address: 192.168.21.20/24

admin@panama> show dns-proxy cache name astroid

Name: astroid
Cache settings:
cache-edns: enabled
entries: 0
Domain IP/Name Type Class TTL Hits
-----------------------------------------------------------------------------------------------------------------------------

admin@panama>

There is currently all allow policy ord.

Any suggestions or hint will be welcomed. 
Chao