How to instruct PIX no inspect the dns of max length 1200 only for specific dns server

ssocsupport · ‎02-08-2010

Good Day,

we have an idea of migrating the ip segments in IPV6 which may use the dns packet of length 1200.

How do i tell my pix to inspect the dns packet of max length 1200 only for specific dns and to instruct other dns to take normal dns inspection.

Kindly advice.

Regards,

SSOC Support

Kureli Sankar · ‎02-08-2010

remove dns inspection from the class default inspection and add it as a separate class where you match an acl where you deny the flow

that you do not want inspected and allow the rest.

we removed http inspection from the class default and added it in a separate class.

-KS