Issue with DNS Interception — Traffic Not Routing Through AD DNS

Support
41

I tried packet capturing both the wifi and ziti but capturing zitis network packet was giving error.

42

hello,
I have mailed the Ziti network packet capture and trace logs with it.

43

Thanks. As far as I can see from everything you’ve sent, the connections do make it from the ZDEW client to the router. So I don’t see anything wrong with the openziti part of this puzzle. I suspect the service configuration needs to be updated to handle some connections that it currently does not.

One thing I have not yet seen is what’s happening between the router and the domain controller. Could you get a capture from the domain controller host (ideally all interfaces) when you’re attempting gpupdate?

Thanks!

44

gpupdate is working now. The likely cause of the previous failures was the tunneler being toggled on and off repeatedly, which caused the wildcard DNS/IP mappings to become inconsistent.

At the moment, everything appears to be functioning normally. I’ll continue testing all related services throughout the day, and If any issues come up, I’ll let you know.

Thanks!!

45

I turned off .io controller service, now gpudate works when i use zc.example.com controller service idk how. Just to make it clear, i created the zc.example.io controller just to intercept AD when gpudate was failing from zc.example.com. suddenly why did it start working again with zc.example.com.

zc.example.com had the deployed subnet 10.0.0.0/16 which had 10.0.0.2 as AD and zc.example.io had deployed *.ADhostname.

What can cause this situation?