PIX-515E DNS Packet Size

[camusa]

Is there a way to allow larger DNS packet sizes with PIX 6.3(1)? I know in PIX 6.3(3), you can do this with the following command:

fixup protocol dns maximum-length 1280 (512 is default)

Thanks in advance,

Chris

 

[mbilgrav]

no fixup prot dns might do it
I am not sure when the legth size was introduced, but untill then the RFC spec 512 as MAX
if you need edns0 then you should upgrade.

 

[Joniels]

Correct syntax is:

fixup protocol dns maximum-length 1024

/Jonas

 

[camusa]

That works without any issues in 6.3(3). With 6.3(1), it returns an error stating "bad protocol dns".

We were able to change the packet size from the server with a registery fix. We found out that the packet size defaults to 1280 in 2K3 server for EDNS.

I appreciate the responses.

Chris