Hello, Unfortunately, we had the same trouble. It seems that a DNS packet with more than 1 RR is going to be dropped (in we saw that first with name in "hotmail.com" domain).
THe only solution we found was to disable that verification. JF On Fri, 28 Mar 2003, John Morgan Salomon wrote: > Hi all, > > I have a Win2k DNS server behind an NG FP-3 HF2 clusterXL gateway. > > I've given it two DNS servers on the internet as forwarders. > > Unfortunately, all DNS traffic from this machine (Windows .NET Server) > is blocked with the error "Illegal Number of Resource Records". > > A quick search turns up this link > > http://www.checkpoint.com/techsupport/documentation/smartdefense/2002/cpai-2002-09.html > > which describes this error as relating to a DNS attack. I can't find > anything > useful in the firewall configuration database or ruleset regarding this. > All DNS > traffic from my internal workstations (WinXP, Win2k) to outside servers is > permitted without problems. > > Any ideas? > > Cheers, > > -John > > ================================================= > To set vacation, Out Of Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Jean-Francois Gobin - Administrateur gobinjf.be http://www.gobinjf.be mailto:[EMAIL PROTECTED] ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
