Hi
Many times we have many requests of DNS from different countries. I have blocked access from the location block but I still have resquest from the same countries , does the location block not work on port 53?
I think we have a DNS attacks
Thanks
Where do see the DNS requests?
If they are logged by the firewall, this shows they are blocked.
Location block can’t suppress incoming traffic. This traffic is generated outside your system.
Location block handles mainly the establishment of connections to unwanted countries. Connections established from the LAN side are legal in view of the firewall.
Thanks
I see dns request from : Status → connections
i using ipfire just for publish webserver (nat) to outside (opening port 80 , 443 and…)