Conference noted::seal

1941.0. "Firewall Nt : reports and DNS problem" by BACHUS::ROELANDTS (Wa d'es ma da ve ne stuut) Mon May 05 1997 04:12

  Hello,

  I seem to have two problems with a Firewall for NT V1.1 on NT V4.0 (but I
  tested on Firewall V1.0 with Nt 3.51 and have the same problems).

  1. The customer was complaining about the fact that his reports were always
     empty, I found a reference to the same problem in another note and asked
     to modify the time reportgen was running from 00:30 to 23:30, so customer
     started getting his reports, but no reports are generated during the Week
     End (I see this also on our test Firewall). I left the firewall up and
     runninmg since last wednesday and got mail from 29 & 30 April + 1 & 2 May.

     Is this known/documented ? Has anyone else seen this before ?

  2. The customer complains that, over nigth, when no one is working that he
     sees DNS querries going, via his RED net, to his ISP. I traced on our 
     Firewall and see DNS querries going on the RED net for systems residing
     on the BLUE net ... namely the the Mail hub system. Everything is working 
     fine DNS lookups, apllication gateways .... but where can those DNS 
     lookups come from then ? Also I saw that WINS was still enabled with the
     defaults configuration, that caused also some lookups to happen + some
     traffic on ports 13x (139 - 137 at least) ... can the WINS bindings be
     disabled without problems ?

  Thank you for any information

       Regards

           Guy ROELANDTS