We're having intermittent problems getting to the Internet thru our PIX 515e. I issued the "show conn" command and there are thousands and thousands of DNS connections for our internal DNS server with multiple Internet IP's....should this be the case? Do I need to allow DNS inbound into our network, or should I just need to allow it outbound?
if that DNS server is also responsible for your public address space and name resolution, then you need to allow it inbound...otherwise, definitely not. it sounds like the public is using it as their own dns server.
can you go into more detail about your dns problem...we are also having DNS issues when thousands of dns translations "clogged" the PIX..and only "clear xlate" solves the issue.
tx
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
