[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RES: [FW1] dns query drop by rule 0
anti spoofing problem? -----Mensagem original----- De: [email protected] [mailto:[email protected]]Em nome de MIS Enviada em: Wednesday, November 22, 2000 1:10 PM Para: FW1 mailinglist Assunto: RE: [FW1] dns query drop by rule 0 When I checked on log on implied rule, dns query is accepted when it unchecked, dns query is rejected but still dns query does not work Why? anybody got explanation for this strange problem? -----Original Message----- From: CryptoTech [mailto:[email protected]] Sent: Tuesday, November 21, 2000 7:13 PM To: MIS Cc: FW1 mailinglist Subject: Re: [FW1] dns query drop by rule 0 I would start by checking the antispoofing configuration. Rule 0 items are indicative of 1) spoofing notifications 2) return connections coming in on known service ports. MIS wrote: > how to fix a problem of nameserver query reject by rule 0 > >from internal network to DNS server in DMZ > > I got the following option checked in the Properties Setup > > Accept Domain Name over UDP (Queries) First > Accept Domain Name over TCP (Zone Transfer) First > > thanks in advance > > ============================================================================ ==== > To unsubscribe from this mailing list, please see the instructions at > http://www.checkpoint.com/services/mailing.html > ============================================================================ ==== ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|