Re: T_ANY

2010-03-20 Thread Glenn English
IX' IDS. I don't know. Just why qmail reports a T_ANY failure as a CNAME failure, I also don't know. -- Glenn English g...@slsware.com ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users

Re: T_ANY

2010-03-19 Thread Glenn English
ny these days.) 6.3 fixed it. The command is "fixup protocol dns min_length ". It was indeed the PIX, though "ip audit signature 6053 disable" allows T_ANY DNS queries. By default sig 6053 blocks T_ANY on the outside interface... Thank you all for

Re: T_ANY

2010-03-19 Thread Glenn English
an bind tell the difference between inside and outside queries for T_ANY? Can the PIX? Can IOS even tell if this is a T_ANY DNS query? And, of course, there's the question I haven't thought of whose answer will fix my problem... -- Glenn English g...@slsware.com ___

T_ANY

2010-03-19 Thread Glenn English
dns"; I don't think IOS in the router knows anything about what type of DNS query is coming in; and the same query to the other nameserver ('dig @ns1.richeyrentals.com -t any slsware.com') also fails. That one's also behind a PIX, but has a non-IOS router. Both servers are Debia