en en en en en en en en en en en en en en en en en sv en en en en es en en en en it en en en en en en en en en en en en en en en en en ca en en en en en ne en en en en en en en en fr en en sv en it en en en en es en ru en en en en en en en en en en en en fr en en en en en en fr en en it en th en en en en vi en en en en it en en en en en
Subdomain and Domain forwarding not working properly with GoDaddy and Sonicwall Firewall | Euclid Networks
info@euclidnet.com | 404.593.0083 | QuickSupport
November 22, 2019by Euclid Networks in Atlanta, Hardware & Drivers Issues, How-To, Networking, Windows 10
Godaddy ​Domain and Subdomain Forwarding times out without forwarding, unexpectedly, when using a Sonicwall Firewall.
Domain Forwarding is typically used to redirect a user to a different website when they type in a URL in a browser. In this case, the forwarding will time out – with either a browser 404 error – or a CONNECTION_TIMED_OUT message. DNS resolution will work properly – subdomain.domain.com for example will return the correct A record, pointing to Godaddy’s IP addresses.
The domain redirect may work sporadically on some phones or computers where traffic is not directly passing through a Sonicwall firewall.
The reason for the failed domain forwarding is that by default the Sonicwall enables TCP Packet Sequence Randomization which causes Godaddy’s Domain Forwarding service to break. When doing packet analysis in Wireshark, we saw TCP ACK connections out of sequence and dropped connections.
To fix this issue:
Login into the IP address of the Sonicwall firewall.
Go to http://{firewall.ip.address}/diag.html – You will get a warning about Advanced Settings
Click on Internal Settings.
Untick the box: “Enable TCP sequence number randomization”
Scroll up and click Accept.
Verify you can now access a Domain forwarded address.  Note that servers behind the firewall will be slightly more vulnerable to host identification by disabling this TCP Sequence Randomization. But in this case, it would be a fairly targeted attack, so the overall risk is low.
Click to share on Facebook (Opens in new window)
Click to share on Twitter (Opens in new window)
Click to share on LinkedIn (Opens in new window)
Click to email a link to a friend (Opens in new window)
Click to print (Opens in new window)
How to : Fix duplicate pinned taskbar icons in Windows 7
Resolving Time Synchronization issues on Virtualized Active Directory Servers
Windows 8.1 Update 1 released, Official MS Support for XP Ends
Questions, comments? Let us know! Cancel reply
Resolving Time Synchronization issues on Virtualized Active Directory Servers January 5, 2022
Windows 10 End-of-Life & Windows 11 Preview : What this means for your business July 2, 2021
Hardware & Drivers Issues
Subscribe to our Newsletter via Email
Enter your email address to subscribe to this blog and receive notifications of new posts by email.
Join 199 other subscribers
Resolving Time Synchronization issues on Virtualized Active Directory Servers
We’ve run into the issue of virtualized Primary Domain Controllers (PDCs) on Windows Server 2016/2019/2022 that fail to properly sync…
ph. 404.593.0083 fx. 404.585.5686
113 Pearl Street SE
Euclid Networks | Technology Partners for your Business | Serving Atlanta's tech support needs since 2006
Computer support vendor for Atlanta, Sandy Springs, Dunwoody, Smyrna, Downtown, Decatur, Brookhaven, Buckhead, Midtown, Roswell, Alpharetta, Chamblee, Kennesaw, Norcross. Offering IT support for lawfirms, healthcare IT, tech support for attorneys, office tech help, and more!