Join the Conversation

To sign in, use your existing MySonicWall account. To create a free MySonicWall account click "Register".

drop Web CFS DNS reply pkt

Enzino78Enzino78 Enthusiast ✭✭

Hello Community,

I've found some packet dropped by the firewall (TZ570, 7.0.1-5065) originating from google DNS 8.8.8.8 to our WAN IP firewall due to the cause reported in the object:

DROPPED, Drop Code: 712(Packet dropped - drop Web CFS DNS reply pkt), Module Id: 25(network), (Ref.Id: _723_iboemfXfcDgt) 1:1)

6470636f6e636f727369.6974.80h2efe2210.webcfs06.com

Google DNS is set as the first DNS Server IP in our WAN config. CFS is currently enabled and enforced

Any clue about a possibile cause?

Thanks

Category: Entry Level Firewalls
Reply

Best Answer

  • CORRECT ANSWER
    MitatOngeMitatOnge Cybersecurity Overlord ✭✭✭
    edited June 17 Answer ✓

    this is a blocked dns query by the CFS engine. :somebody is fetching blocked web site query from google dns.

Sign In or Register to comment.