NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] DNS Question



Windows 2000 servers running SMTP will send out all DNS queries via TCP
and not UDP. Refer to the following Microsoft article:

http://support.microsoft.com/default.aspx?scid=kb;EN-US;q263237

I have also seen Windows NT 4.0 & 2000 workstations sending DNS queries
via TCP and not UDP.




Don <[email protected]>
Sent by: Mailing list for discussion of Firewall-1
<[email protected]>
05/02/2002 08:07 AM
Please respond to Mailing list for discussion of Firewall-1


        To:     [email protected]
        cc:
        Subject:        Re: [FW-1] DNS Question


> 53-TCP is used for zone transfer should be secured 53-UDP can be open to
> all. TIP.
This is not correct. Please read my post below.

-Don

> >>>After all the IPSO upgrades and service pack upgrades for our
> >>>Nokia/Checkpoint 4.1 SP5a solution, we started seeing some random
> >>>results with our DNS servers.  Sometimes, it would fail on the first
> >>>lookup - but after that it would be ok... my question is simple...
for
> >>>the last several years we've had the simple 2 rules for our DNS
Servers:
> >>>
> >>>1.    Any (Source)    DNSServers(Destination)    DNS-53(Port)
> >>>2.     DNSServers (Source)    Any (Source)    DNS-53 (port)
> >>>
> >>>The question is simple...are we missing something obvious???  Our DNS
> >>>servers are Windows 2000.
> >>>
> >>When you say DNS-53, do you mean UDP or TCP? You need to allow both in
> >>order for DNS to function properly. Most DNS requests use UDP port 53,
> >>however larger requests use TCP port 53. It may be these larger
requests
> >>that are failing.
> >>
> >>-Don

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.