ASA blocking

[dhanikonda]

Dear Experts,

Iam getting one error on my firewall and how can i fix this problem.

Deny udp src MZ:10.242.100.20/49290 dst OUTSIDE:111.93.252.6/53 by access-group "MZ_access_in" [0x0, 0x0]

How can fix this problem.

please help me

srinivas

[nkarthikeyan]

Hi Dhanikonda,

Access list MZ_access_in which is defined in your firewall is blocking the traffic. rule is not permitted..... so please allow the specific flow in the ACL to allow the specific flows....

access-list MZ_access_in line 1 extended permit udp host 111.93.252.6 eq 53

!

add your lan segment subnet in the acl & apply the above access-list and try.... it will work... it will start resolving the hostnames & url's....