Re: DNS Help

This is the point where we enable DNS logging and see what shakes out.
Is the ISA still denying those requests?

Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!

----- Original Message -----
From: "Raji Arulambalam" <rajia@xxxxxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Wednesday, February 06, 2002 22:33
Subject: [isalist] Re: DNS Help


http://www.ISAserver.org


Hi Jim

Many thanks for the tips etc. I have made the changes, but still not
working.
Remote systems are still unable to do Reverse lookups. They are unable to
get the PTR records from our DNS server. The forward lookup zones gets
transfered ok.

Any help on where I can start to look.??

Thanks

---------------------------------------------
  Raji Arulambalam
  Systems Administrator
  Bay of Plenty REGIONAL Council
  P O Box 364 Whakatane.
  NEW ZEALAND
  Phone: 0800 ENV BOP (0800 368 267) +64 7 922 3390
  Fax:    0800 ENV FAX (0800 368 329) +64 7 922 3393
  http://envbop.govt.nz
--------------------------------------------
[Unix] is not necessarily evil, like OS/2.  - Peter Norton



-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Thursday, 7 February 2002 3:25 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: DNS Help


http://www.ISAserver.org


PTR lookups are made using the same mechanism for forward lookups; UDP-53.
NSLookup and some SMTP servers (IIS, Exchange, for instance) also use
TCP-53.


Packet Filter Name : DNS filter
    This one is ok (outbound packets) - in other words, no change here

Packet Filter Name : DNS Query
Old - Direction : Inbound and Outbound
New - Direction : Receive-Send

Packet Filter Name : DNS TCP
    This one is ok (inbound packets) - this on also needs no change

Packet Filter Name : DNS Zone Transfer
Old - Direction : Inbound and Outbound
New - Direction : Inbound
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/authors/harrison/
Read the books!


******************************************************
This e-mail has been checked for viruses and no viruses were detected.

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')




Other related posts: