YES! Don't allow this from anywhere, only allow it from your secondary DNS
servers.
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Larry Pingree
Sr. Security Engineer/Check Point Instructor
CCSA, CCSE, CCSI, ICE, ICI, NSA
Website: http://www.SiegeWorks.com <http://www.siegeworks.com/>
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of y m
Sent: Tuesday, August 21, 2001 11:22 AM
To: [EMAIL PROTECTED]
Subject: [FW1] domain-tcp drops
Hi,
In the firewall logs I see lot of domain-tcp drops
with source being as different IP Addresses and
Destination being our DNS server in DMZ .
The DNS server in DMZ is used for resolving external
domains .
Is this because people are trying to do domain
transfers or something else ?
Thanks
__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
