Fwd: Re: DNS-Resolver doesn't support middle-size and big TXT-Rules!?

Hi Mat,

thanks a lot for Your reply. But I have no CISCO FW I have m0n0wall  
and this is the only gateway between my linux and windows machineswhat  
could disturb the traffic - however I dont guess, that my provider  
Kabel-BW should have there asome responsability. - But please what  
means ids? would this be m0n0-relevant?

Ralf


Hi Ralf

I had this problem runnning a DNS server with windows 2003 and a Cisco pix
firewall. I had to make a change on the ids as the pix treated the packets
as bad/malicious. Hope that helps you

Mat.

Sent from my Android phone
On Jul 6, 2011 10:24 PM, <[email protected]> wrote:
> Hi again and excuses -
>
> because I made some english mistakes able to misunderstand the
> problem. This seems to be in the length of TXT-Records for
> DNS-Resolving.
>
> I didnt change anything what would concern these records... - How is
> this problem to evaluate?
>
> Does anybody has any hint?
>
> Thanks a lot in advance
>
> Ralf
>>
>> yesterday I made a new netanalyzer Test wich is available for free at:
>> http://netalyzr.icsi.berkeley.edu/index.html
>>
>> with the following results:
>>
>> Your DNS-Resolver is not able to receive big DNS-Replys even with
>> activated EDNS.
>>
>> The DNS-Resolver doesnt support the following request-types:
>>
>> + middle-size (~1300B) TXT-RECORDS
>> + big-size (~3000B) TXT-RECORDS
>>
>> ##############################################
>>
>> Ihr DNS-Resolver kann keine großen (>1500 Byte) DNS-Rückmeldungen
>> erfolgreich empfangen, obwohl EDNS aktiviert sein soll.
>>
>>
>> Der Resolver 192.168.1.10 unterstützt die folgenden Anfragetypen nicht:
>>
>> * Mittelgroße (~1300B) TXT-Einträge
>> * Große (~3000B) TXT-Einträge
>>
>> Er validiert DNSSEC. Er lässt NXDOMAIN-Fehlermeldungen unverändert.
>> Der Resolver besitzt die folgenden Eigenschaften:
>>
>> * Rechnername: ka-dns-res-01
>> * Version: dnsmasq-2.45
>> * Authoren: Simon Kelley
>> * Lizenzrechte: Copyright (C) 2000-2008 Simon Kelley
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: [email protected]
>> For additional commands, e-mail: [email protected]
>>
>>
>
>
> ----- Ende der Nachricht von [email protected] -----
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>


----- Ende der weitergeleiteten Nachricht -----