- Posts: 1
- Thank you received: 0
pix506e - fixup protocol dns impacts ...
18 years 8 months ago #13488
by vblondel
pix506e - fixup protocol dns impacts ... was created by vblondel
Hello everybody.
I currently learn to configure my cisco pix 506e firewall. I am now precisely experimenting "fixup" statements and I just remarked that when I activate "fixup protocol dns maximum-length 512" I cannot make any telnet to any protocol on my cisco pix from wan side.
For example, without any "fixup protocol dns" I can well make "telnet 1.2.3.4 80" and type basic HTTP statements like "GET / HTTP/1.0" but if activate "fixup protocol dns" I cannot make anymore telnet to port 80, 25 ...
Can somebody explain me if this is a normal behaviour and why ?
Many thanks for your comprehension.
Regards
Vincent
I currently learn to configure my cisco pix 506e firewall. I am now precisely experimenting "fixup" statements and I just remarked that when I activate "fixup protocol dns maximum-length 512" I cannot make any telnet to any protocol on my cisco pix from wan side.
For example, without any "fixup protocol dns" I can well make "telnet 1.2.3.4 80" and type basic HTTP statements like "GET / HTTP/1.0" but if activate "fixup protocol dns" I cannot make anymore telnet to port 80, 25 ...
Can somebody explain me if this is a normal behaviour and why ?
Many thanks for your comprehension.
Regards
Vincent
Time to create page: 0.115 seconds