John, Which OS do you have Win2K or .NET?
I see those errors logged too, with Win2K, but there are no problems on my end. You can adjust DNS protocol enforcement settings in SmartDefense settings. Chris -----Original Message----- From: John Morgan Salomon [mailto:[EMAIL PROTECTED] Sent: Friday, March 28, 2003 11:17 AM To: [EMAIL PROTECTED] Subject: [FW-1] Illegal Number of Resource Records Hi all, I have a Win2k DNS server behind an NG FP-3 HF2 clusterXL gateway. I've given it two DNS servers on the internet as forwarders. Unfortunately, all DNS traffic from this machine (Windows .NET Server) is blocked with the error "Illegal Number of Resource Records". A quick search turns up this link http://www.checkpoint.com/techsupport/documentation/smartdefense/2002/cp ai-2002-09.html which describes this error as relating to a DNS attack. I can't find anything useful in the firewall configuration database or ruleset regarding this. All DNS traffic from my internal workstations (WinXP, Win2k) to outside servers is permitted without problems. Any ideas? Cheers, -John ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
