Skip to main content
Jond
New Member
June 19, 2020
Solved

Bizarre DNS results? 198.18.x.y returned

  • June 19, 2020
  • 1 reply
  • 9913 views

Hi there,

I'm getting something odd happening which I've never seen before, I am intermittently getting DNS queries answered with a 198.18.x.y address.

 

Using Fortiguard or local DNS servers doesn't make any difference to the behaviour.

 

It happens with both local clients and through the CLI on the box.

 

For instance:

 

 

Have to say I've no seen that before!

 

Any ideas?

 

Thanks,

Jon

    Best answer by Dave_Hall

    Is the Fortigate's WAN(s) interfaces configured/set to override internal DNS?

    1 reply

    rwpatterson
    New Member
    June 19, 2020

    Could you paste ASCII results from the query? Pictures don't quite work.

    Dave_Hall
    Dave_HallAnswer
    New Member
    June 19, 2020

    Is the Fortigate's WAN(s) interfaces configured/set to override internal DNS?

    emnoc
    New Member
    June 19, 2020

    And to add, you can diag sniffer packet any "host x.x.x.x and src port 53" to see the DNS-answers

     

     

    Ken Felix