Re: Suspecious DNS queries dropped by Firewall

2011-12-14 Thread babu dheen
: Suspecious DNS queries dropped by Firewall To: bind-users@lists.isc.org Date: Tuesday, 13 December, 2011, 9:12 PM At 04:46 13-12-2011, babu dheen wrote: In what situation, DNS packet size can exceed more than 512 bytes.  In fact, my gateway DNS TXT records used for DKIM, for example. Regards, -sm

Re: Suspecious DNS queries dropped by Firewall

2011-12-14 Thread G.W. Haywood
Hi there, On Wed, 14 Dec 2011 babu dheen wrote: Can you tell me list of URL which size exceed 514 bytes to verify whether my internal server truncate/return failure code when query such URL using UDP query? You really ought to be able to do this for yourself. Find any domain using DNSSEC

Re: Suspecious DNS queries dropped by Firewall

2011-12-14 Thread Matus UHLAR - fantomas
On 14.12.11 17:21, babu dheen wrote: In this case, do you think that internal users trying to send emails directly to internet? Maybe, maybe not. DNS queries can come from many other applications. Email delivery is taken care by Email Gateway device, obviously, DKIM verification (if enabled)

Re: Suspecious DNS queries dropped by Firewall

2011-12-14 Thread SM
At 03:51 14-12-2011, babu dheen wrote: In this case, do you think that internal users trying to send emails directly to internet? No. Email delivery is taken care by Email Gateway device, obviously, DKIM verification (if enabled) can only be done by Email gateway of my company... How does

Re: Suspecious DNS queries dropped by Firewall

2011-12-14 Thread Kevin Oberman
On Wed, Dec 14, 2011 at 3:51 AM, babu dheen babudh...@yahoo.co.in wrote: In this case, do you think that internal users trying to send emails directly to internet? Email delivery is taken care by Email Gateway device, obviously, DKIM verification (if enabled) can only be done by Email

Suspecious DNS queries dropped by Firewall

2011-12-13 Thread babu dheen
Hi,    Our company users are using internal DNS servers for name resolution and internal DNS servers are configured to forward the DNS query to company gateway DNS servers for external queries   User -- internal DNS server --- gateway DNS server --- internet   But when i look at the

Re: Suspecious DNS queries dropped by Firewall

2011-12-13 Thread Anand Buddhdev
On 13/12/2011 13:04, babu dheen wrote: Hi, Our company users are using internal DNS servers for name resolution and internal DNS servers are configured to forward the DNS query to company gateway DNS servers for external queries User -- internal DNS server --- gateway DNS server ---

Re: Suspecious DNS queries dropped by Firewall

2011-12-13 Thread babu dheen
ana...@ripe.net wrote: From: Anand Buddhdev ana...@ripe.net Subject: Re: Suspecious DNS queries dropped by Firewall To: babu dheen babudh...@yahoo.co.in Cc: bind-users@lists.isc.org Date: Tuesday, 13 December, 2011, 5:39 PM On 13/12/2011 13:04, babu dheen wrote: Hi,   Our company users

Re: Suspecious DNS queries dropped by Firewall

2011-12-13 Thread Phil Mayers
On 13/12/11 12:46, babu dheen wrote: Dear Anand, In what situation, DNS packet size can exceed more than 512 bytes. In This has been discussed many times in the list and elsewhere. There's no need to re-iterate it again. DNS packets 512 bytes are legal. You should permit them. In this

Re: Suspecious DNS queries dropped by Firewall

2011-12-13 Thread James Michael Keller
EDNS. Overview of EDNS: https://en.wikipedia.org/wiki/Extension_mechanisms_for_DNS -James Keller --- On *Tue, 13/12/11, Anand Buddhdev /ana...@ripe.net/* wrote: From: Anand Buddhdev ana...@ripe.net Subject: Re: Suspecious DNS queries dropped by Firewall To: babu dheen babudh

Re: Suspecious DNS queries dropped by Firewall

2011-12-13 Thread SM
At 04:46 13-12-2011, babu dheen wrote: In what situation, DNS packet size can exceed more than 512 bytes. In fact, my gateway DNS TXT records used for DKIM, for example. Regards, -sm ___ Please visit