Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 253
  • Last Modified:

New PIX- Can't access www.yahoo.com

I set up a PIX with 6.3.4 and 3.0.2.  Everything seems to work except the ability to access the main yahoo site.  I do not have any filters for Java or ActiveX.  I am not doing URL filtering.  Any ideas?

Steve
0
smeek
Asked:
smeek
  • 3
  • 3
  • 2
1 Solution
 
smeekAuthor Commented:
I will try the ping test.

Additional info, this is a T1. We replaced a SnapGear firewall with a PIX.

Steve
0
 
Tim HolmanCommented:
Can you access the yahoo IP addresses ?
Is DNS working internally ?
This sounds to me like a name resolution problem.  Maybe the PIX isn't configured to be able to see port 53 on Internet DNS servers in order to resolve the name, and you're just left with whatever DNS entries are cached on local machines ??
0
NEW Internet Security Report Now Available!

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out this quarters report on the threats that shook the industry in Q4 2017.

 
smeekAuthor Commented:
TD, You got me on thinking down a track...

I think it was actually a change in Windows 2003 DNS implementation.  It seems the 2003 implementation of DNS allows DNS to accept >512 byte UDP replies.  Cisco's DNS fixup seemed to limit it to 512K inspection.  I could have removed the fixup but instead increased it's max length.  As soon as I changed, I could connect with no issues.

Steve
0
 
Tim HolmanCommented:
> TD, You got me on thinking down a track...

Hmmm... I fail to see why, seeming I was the only one to mention DNS ?

*sigh*

;)
0
 
td_milesCommented:
Tim, I'm happy to offer you some of the points if you feel hard done by ?
0
 
smeekAuthor Commented:
Well, as you can see from my posting, I started back on the issue at 7:41am.  I had it solved by 9:30am...  I could have used your suggestion a bit earlier, maybe I could have resolved even quicker.

Steve
0
 
Tim HolmanCommented:
A-ha... !  No problem, I see your point ! Sorry.  ;)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

What Kind of Coding Program is Right for You?

There are many ways to learn to code these days. From coding bootcamps like Flatiron School to online courses to totally free beginner resources. The best way to learn to code depends on many factors, but the most important one is you. See what course is best for you.

  • 3
  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now