Re: [FW-1] SecureRemote And DNS

[Patrick Charpentier <Patrick.Charpentier@FW1-NOSPAMRECREATION.BOMBARDIER.COM>]

Title: RE: [FW-1] SecureRemote And DNS

I found my error.  I did'nt have any default dns server in my network connection config on the client side.  I put my ISP dns and now Secure Remote reach my internal dns server.

Patrick!

----------
De :    Patrick Charpentier[SMTP:Patrick.Charpentier@RECREATION.BOMBARDIER.COM]
Répondre à :    Mailing list for discussion of Firewall-1
Date :  17 avril, 2002 11:11
A :     FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Objet : [FW-1] SecureRemote And DNS

Hi!

        I have a dns server on my private network and I try to push the ip address of my dns server to Secure Remote.  I created a file called dnsinfo.C in $fwdir/conf directory.  When I update topology, Secure remote download the dns info and put it in his userc.C file.  But when I try a nslookup in command line, it don't try to reach my internal dns server.  This is my dnsinfo.C file:

(
        :dns_servers (
                : (age.firewall
                        :obj (
                                : (10.17.0.1)
                        )
                :topology (
                        : (
                                :ipaddr (10.17.0.0)
                                :ipmask (255.255.255.0)
                        )
                )
        :domain (
        : (
                        :dns_label_count (4)
                        :domain (.private)
                )
      )
)
)
:encrypt_dns (true)
)

10.17.0.1 is my dns server.
When I manually enter my internal dns server on the client side, nslookup work fine (nslookup 10.17.0.1)
I use NG FP2 on a win2k server box and CheckPoint VPN-1 SecureClient NG FP2 Build 52032 in XP

Does anyone can give me some hint?

Thks a lot!

Patrick