<div>
Sorry for my delay, was out this past week...corrected to 1024 bytes - and now I have a general idea why :)
</div>


Sorry for my delay, was out this past week...corrected to 1024 bytes - and now I have a general idea why :)

<div>
<div class="content wysiwyg-content">
My CISCO PIX firewall's default setting includes this:<br />
fixup protocol dns maximum-length 512, which I've increased to 530 to accomodate a URL that I couldn't reach due to this error:<br />
Dropped UDP DNS reply from outside:1.2.3.4/53 to inside:5.6.7.8/79; packet length 520 bytes exceeds configured limit of 512 bytes.<br />
I still get this kind of error, and occasionally I lose DNS resolution altogether, even though comms are still up (I get ICMP replies from external IPs). I could remove the maximum-length entry or increase it until the error goes away, but I'd prefer to know what the standard is. &nbsp;My ISP uses Microsoft, and I'm hosting DNS servers on Linux systems. &nbsp;Are there different standards for DNS header length for MS and Unix/Linux servers, and what is the risk of increasing the DNS maximum length above 512 on the PIX? <br />
<br />
<br />

</div>
</div>


My CISCO PIX firewall's default setting includes this:
fixup protocol dns maximum-length 512, which I've increased to 530 to accomodate a URL that I couldn't reach due to this error:
Dropped UDP DNS reply from outside:1.2.3.4/53 to inside:5.6.7.8/79; packet length 520 bytes exceeds configured limit of 512 bytes.
I still get this kind of error, and occasionally I lose DNS resolution altogether, even though comms are still up (I get ICMP replies from external IPs). I could remove the maximum-length entry or increase it until the error goes away, but I'd prefer to know what the standard is.  My ISP uses Microsoft, and I'm hosting DNS servers on Linux systems.  Are there different standards for DNS header length for MS and Unix/Linux servers, and what is the risk of increasing the DNS maximum length above 512 on the PIX? 




DNS header length question

The variety of Linux distributions creates myriad issues relating to configuration and operations when computers are networked, not the least of which is the use of various network management applications, some of which are included with specific distributions, while others are standalone applications.