Hi all,

I have a Win2k DNS server behind an NG FP-3 HF2 clusterXL gateway.

I've given it two DNS servers on the internet as forwarders.

Unfortunately, all DNS traffic from this machine (Windows .NET Server)
is blocked with the error "Illegal Number of Resource Records".

A quick search turns up this link

http://www.checkpoint.com/techsupport/documentation/smartdefense/2002/cpai-2002-09.html

which describes this error as relating to a DNS attack.  I can't find
anything
useful in the firewall configuration database or ruleset regarding this.
All DNS
traffic from my internal workstations (WinXP, Win2k) to outside servers is
permitted without problems.

Any ideas?

Cheers,

-John

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to