Tag Archives: DNS

Sophos Services FQDN and IP Address List

This list includes some of the FQDNs and IP Addresses used by Sophos Services, this may be useful for identifying outgoing traffic and creating web filtering exceptions.

*.cloudfront.net
*.ctr.sophos.com
*.hydra.sophos.com
*.sophos.com
*.sophosupd.com
*.sophosupd.net
*.sophosxl.net
108.128.21.191
108.128.75.57
176.34.202.39
18.200.140.39
18.200.233.166
18.200.76.187
18.201.4.220
23.56.184.93
3.248.161.254
3.248.236.19
3.248.239.225
34.240.132.250
34.240.132.63
34.240.70.198
34.240.87.136
34.241.47.153
34.242.175.229
34.242.189.0
34.242.190.168
34.243.109.72
34.243.155.26
34.243.46.159
34.246.1.161
34.246.93.20
34.247.133.51
34.247.19.150
34.248.0.181
34.249.116.122
34.249.16.38
34.249.213.108
34.249.56.234
34.249.75.71
34.250.177.130
34.250.201.204
34.250.232.147
34.251.0.214
34.251.206.176
34.252.99.77
34.253.34.19
34.254.24.5
4.sophosxl.net
46.137.119.69
46.51.205.49
52.16.156.95
52.16.224.248
52.18.132.38
52.18.142.239
52.18.201.121
52.19.111.54
52.19.130.35
52.19.133.193
52.208.138.248
52.208.151.187
52.208.47.80
52.208.61.137
52.209.113.230
52.209.174.16
52.209.74.179
52.211.118.19
52.211.181.255
52.211.215.132
52.211.33.11
52.211.40.77
52.212.179.152
52.212.19.181
52.212.243.39
52.212.80.79
52.213.185.15
52.213.222.108
52.213.224.21
52.213.227.181
52.213.81.142
52.214.122.237
52.214.193.2
52.215.191.67
52.31.157.236
52.48.158.77
52.48.251.68
52.49.52.52
52.49.55.251
52.51.136.43
52.51.19.238
54.154.78.113
54.155.110.171
54.155.150.168
54.155.54.127
54.171.179.249
54.171.2.113
54.171.211.242
54.171.39.210
54.171.82.87
54.194.136.103
54.194.149.107
54.194.158.193
54.194.23.13
54.194.31.233
54.216.250.187
54.220.121.131
54.228.154.173
54.229.182.239
54.229.193.103
54.229.26.205
54.229.29.253
54.246.206.153
54.246.225.42
54.73.159.85
54.73.59.214
54.75.131.11
54.76.53.13
54.77.101.166
54.77.103.108
54.77.109.237
54.77.183.40
54.77.190.39
54.78.168.73
54.78.85.182
63.32.154.88
63.32.247.92
63.34.49.237
63.35.134.40
99.81.41.145
99.81.95.11
amazonaws.com
api.stn100yul.ctr.sophos.com
api-cloudstation-us-east-2.prod.hydra.sophos.com
az416426.vo.msecnd.net
central.sophos.com
cloud.sophos.com
cloud-assets.sophos.com
d1.sophosupd.com
d1.sophosupd.net
d2.sophosupd.com
d2.sophosupd.net
d3.sophosupd.com
d3.sophosupd.net
dc.services.visualstudio.com
dci.sophosupd.com
dci.sophosupd.net
downloads.sophos.com
dzr-api-amzn-eu-west-1-9af7.api-upe.p.hmr.sophos.com
dzr-mcs-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com
dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com
http.00.a.sophosxl.net
http.00.s.sophosxl.net
id.sophos.com
mcs.stn100hnd.ctr.sophos.com
mcs.stn100syd.ctr.sophos.com
mcs.stn100yul.ctr.sophos.com
mcs2.stn100hnd.ctr.sophos.com
mcs2.stn100syd.ctr.sophos.com
mcs2.stn100yul.ctr.sophos.com
mcs2-cloudstation-eu-central-1.prod.hydra.sophos.com
mcs2-cloudstation-eu-west-1.prod.hydra.sophos.com
mcs2-cloudstation-us-east-2.prod.hydra.sophos.com
mcs2-cloudstation-us-west-2.prod.hydra.sophos.com
mcs-cloudstation-eu-central-1.prod.hydra.sophos.com
mcs-cloudstation-eu-west-1.prod.hydra.sophos.com
mcs-cloudstation-us-east-2.prod.hydra.sophos.com
mcs-cloudstation-us-west-2.prod.hydra.sophos.com
samples.sophosxl.net
sdds3.sophosupd.com
sdds3.sophosupd.net
sdu-feedback.sophos.com
sophos.com
sophosupd.com
sophosxl.net
ssp.feedback.sophos.com
sus.sophosupd.com
sus.sophosupd.net
t1.sophosupd.com

Dns.exe – Pre Service Pack 3 Revision History for Windows Server 2008 SP2 and Windows Small Business Server 2008 (SBS 2008)

Dns.exe – Pre Service Pack 3 Revision History for Windows Server 2008 SP2 and Windows Small Business Server 2008 (SBS 2008)

06-Jun-2013 – 6.0.6002.23133 – Dns.exe – x86/x64 – http://support.microsoft.com/kb/2549656 – DNS Server service randomly cannot resolve external names and returns a “Server Failure” error if IPv6 is disabled in Windows Server 2008 and Windows Server 2008 R2

26-Dec-2011 – 6.0.6002.22763 – Dns.exe – x86/x64 – http://support.microsoft.com/kb/2647170 – MS12-017: Vulnerability in DNS Server could allow denial of service: March 13, 2012

19-Dec-2011 – 6.0.6002.22758 – Dns.exe – x86/x64 – http://support.microsoft.com/kb/2655960 – DNS server stops responding to DNS queries from client computers in in Windows Server 2003, in Windows Server 2008 or in Windows Server 2008 R2

01-Nov-2011 – 6.0.6002.22736 – Dns.exe – x86/x64 – http://support.microsoft.com/kb/2634157 – DNS name resolution fails when using a long CNAME or DNAME chain record in Windows Server 2008

30-Sep-2011 – 6.0.6002.22722 – Dns.exe – x86/x64 – http://support.microsoft.com/kb/2625735 – DNS queries for external domains are not resolved when you use Conditional Forwarding in Windows Server 2008

22-Jun-2011 – 6.0.6002.22665 – Dns.exe – x86/x64 – http://support.microsoft.com/kb/2562485 – MS11-058: Vulnerabilities in DNS Server could allow remote code execution: August 9, 2011

13-Sep-2010 – 6.0.6002.22486 – Dns.exe – x86/x64 – http://support.microsoft.com/kb/2408181 – AAAA record of a Windows Server 2008 or of a Windows Server 2008 R2 domain controller is deleted automatically if the domain controller uses an Active Directory–integrated zone and has a Microsoft 6to4 adapter

05-Mar-2010 – 6.0.6002.22355 – Dns.exe – x86/x64 – http://support.microsoft.com/kb/981370 – The DNS Server service on an RODC does not respond to DNS queries for several minutes if the link to some RWDCs breaks in Windows Server 2008

18-Sep-2009 – 6.0.6002.22229 – Dns.exe – x86/x64 – http://support.microsoft.com/kb/960898 – Name resolution is broken between a Windows Server 2003-based parent domain and its child domains, and among the child domains, when scavenging is configured on both the parent and child DNS zones

17-Sep-2009 – 6.0.6002.22228 – Dns.exe – x86/x64 – http://support.microsoft.com/kb/975654 – Error code when you try to install the DNS server role if all network adapters are disabled or unplugged on a computer that is running Windows Server 2008: “0x80070643”

11-Jun-2009 – 6.0.6002.22151 – Dns.exe – x86/x64 – http://support.microsoft.com/kb/972516 – A DirectAccess access failure occurs after the DNS servers that are running Windows Server 2008 return empty responses for AAAA queries in a WINS zone

Dns.exe – Pre Service Pack 2 Revision History for Windows Server 2008 R2 SP1 and Windows Small Business Server 2011 (SBS 2011)

Dns.exe – Pre Service Pack 2 Revision History for Windows Server 2008 R2 SP1 and Windows Small Business Server 2011 (SBS 2011)

02-Nov-2013 – 6.1.7601.22500 – Dns.exe – x64 – http://support.microsoft.com/kb/2905363 – Windows DNS server incorrectly parses client computer records

08-Aug-2013 – 6.1.7601.22416 – Dns.exe – x64 – http://support.microsoft.com/kb/2875350 – DNS Server service cannot bind to port 53 in Windows Server 2008 R2 SP1

09-May-2013 – 6.1.7601.22320 – Dns.exe – x64 – http://support.microsoft.com/kb/2847677 – DNS service freezes in Windows Server 2008 R2 SP1

01-May-2013 – 6.1.7601.22313 – Dns.exe – x64 – http://support.microsoft.com/kb/2845145 – A memory leak occurs in the DNS server service after you enable recursion on a server that is running Windows Server 2008 R2

06-Feb-2013 – 6.1.7601.22243 – Dns.exe – x64 – http://support.microsoft.com/kb/2809959 – DNS Server service does not start on a computer that is running Windows Server 2008 R2

07-Jan-2013 – 6.1.7601.22211 – Dns.exe – x64 – http://support.microsoft.com/kb/2550719 – “Name Error 3” error message when you send a query to an EDNS-enabled forwarding DNS server, and the query is resolved by using WINS forward lookup in Windows Server 2008 R2

06-Sep-2012 – 6.1.7601.22108 – Dns.exe – x64 – http://support.microsoft.com/kb/2739005 – DNS response packet is marked as invalid after you enable the EDNS probes feature on a DNS server that is running Windows Server 2008 R2

26-Jul-2012 – 6.1.7601.22071 – Dns.exe – x64 – http://support.microsoft.com/kb/2738597 – TTL values are different when you send two queries for the same SOA record in Windows Server 2008 R2

16-Jun-2012 – 6.1.7601.22024 – Dns.exe – x64 – http://support.microsoft.com/kb/2724183 – Parent DNS servers cannot resolve the names of records from a child domain after you configure DNSSEC for an Active Directory-integrated DNS zone in Windows Server 2008 R2

12-May-2012 – 6.1.7601.21993 – Dns.exe – x64 – http://support.microsoft.com/kb/2712740 – TTL values are different when you send two queries for the same SOA record in Windows Server 2008 R2

27-Dec-2011 – 6.1.7601.21885 – Dns.exe – x64 – http://support.microsoft.com/kb/2647170 – MS12-017: Vulnerability in DNS Server could allow denial of service: March 13, 2012

17-Dec-2011 – 6.1.7601.21879 – Dns.exe – x64 – http://support.microsoft.com/kb/2655960 – DNS server stops responding to DNS queries from client computers in in Windows Server 2003, in Windows Server 2008 or in Windows Server 2008 R2

28-Nov-2011 – 6.1.7601.21867 – Dns.exe – x64 – http://support.microsoft.com/kb/2648326 – “Server Failure” error message and DNS name resolution of external websites fails on a DNS server that is running Windows Server 2008 R2

30-Sep-2011 – 6.1.7601.21829 – Dns.exe – x64 – http://support.microsoft.com/kb/2586946 – You cannot update the name server records for a domain that has a “.no” top-level country code to use Windows Server 2008 R2-based DNS name servers

09-Sep-2011 – 6.1.7601.21814 – Dns.exe – x64 – http://support.microsoft.com/kb/2616861 – DNS Server service does not respond to a CNAME query in the GlobalNames zone correctly in Windows Server 2008 R2

08-Sep-2011 – 6.1.7601.21813 – Dns.exe – x64 – http://support.microsoft.com/kb/2616776 – DNS Server service does not use root hints to resolve external names in Windows Server 2008 R2

21-Jun-2011 – 6.1.7601.21754 – Dns.exe – x64 – http://support.microsoft.com/kb/2562485 – MS11-058: Vulnerabilities in DNS Server could allow remote code execution: August 9, 2011

20-May-2011 – 6.1.7601.21731 – Dns.exe – x64 – http://support.microsoft.com/kb/2408181 – AAAA record of a Windows Server 2008 or of a Windows Server 2008 R2 domain controller is deleted automatically if the domain controller uses an Active Directory–integrated zone and has a Microsoft 6to4 adapter

19-May-2011 – 6.1.7601.21730 – Dns.exe – x64 – http://support.microsoft.com/kb/2548145 – The size of the Active Directory increases rapidly on a Windows Server 2003-based or Windows Server 2008 R2-based domain controller that hosts the DNS Server role

14-May-2011 – 6.1.7601.21728 – Dns.exe – x64 – http://support.microsoft.com/kb/2549656 – DNS Server service randomly cannot resolve external names and returns a “Server Failure” error if IPv6 is disabled in Windows Server 2008 R2

11-May-2011 – 6.1.7601.21725 – Dns.exe – x64 – http://support.microsoft.com/kb/2550719 – “Name Error 3” error message when you send a query to an EDNS-enabled forwarding DNS server, and the query is resolved by using WINS forward lookup in Windows Server 2008 R2

23-Mar-2011 – 6.1.7601.21690 – Dns.exe – x64 – http://support.microsoft.com/kb/983534 – Performance of the DNS Server service keeps decreasing under a heavy load situation in Windows Server 2008 R2

22-Mar-2011 – 6.1.7601.21689 – Dns.exe – x64 – http://support.microsoft.com/kb/2508835 – DNS Server service does not resolve some external DNS names after it works for a while in Windows Server 2008 R2

13-Jan-2011 – 6.1.7601.21640 – Dns.exe – x64 – http://support.microsoft.com/kb/2495375 – DNS does not respond to a request for a SPF (TXT) DNS record correctly in Windows Server 2008 R2 if the record is larger than 512 bytes

Microsoft Windows Server 2008 and Microsoft Windows Server 2008 R2 DNS Server may stop responding to DNS queries and requests from client computers

Microsoft Windows Server 2008 and Microsoft Windows Server 2008 R2 DNS Server may stop responding to DNS queries and requests from client computers, this issue may occur randomly and when it is occuring the DNS Server stops responding.

This issue occurs because the DNS Server goes into an infinite loop, more information about this issue and a hotfix to address the issue is provided in Microsoft KB 2655960 http://support.microsoft.com/kb/2655960