Re: [FW1] DNS query problem through firewall

[CryptoTech <cryptotech@FW1-NOSPAMgmx.de>]

Preet,
You do not need the DNS over TCP property.  Clients use the udp for lookups.  What
do you have on 'allow udp replies' and the udp reply timeout?

CryptoTech

"Kumar, Preet (Exchange)" wrote:

> Hi,
> I am having trouble with dns queries through the firewall. I have the
> Properties->Security policy set as follows
>
> Enable Domain name queries (UDP) First
> Enable Domain name Download (TCP) First
>
> The firewall lets the query through the firewall to the DNS server but
> the packets back from the DNS server to the client are getting dropped.
>
> How can I overcome this ?
>
> Running firewall-1 ver 4.0 SP5
>
> Preet
>
> ***********************************************************************
> Bear Stearns is not responsible for any recommendation, solicitation,
> offer or agreement or any information about any transaction, customer
> account or account activity contained in this communication.
> ***********************************************************************
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================