On Mon, 2005-03-28 at 08:28 -0500, Rich Kasting wrote: Can you run dnscache on the qmail box? Also make sure that DNS Fixup is enabled on the PIX (iirc) i havnt touched a PIX for a while.
Shane > The weird part is that it's not blocking DNS queries that I issue from a > command prompt. It seems to think that the ones that qmail issues are > some sort of intrusion attempt pattern. > > I can actually perform successful dig a and dig mx from the command prompt. > > Does qmail really do something that much different in DNS that it could > trigger intrusion detection? > > I'm just asking because the network guy is going to be reluctant. You > know how paranoid they can be. :) > >