cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
691
Views
0
Helpful
1
Replies

Blocking undesired DNS packets

h-kholghi
Level 1
Level 1

Recently, I am finding a lot of warning entries in my Windows

2000 DNS server's event log. These messages are generated every five to ten

minutes and they say something like "The DNS server encountered an invalid

domain name in a packet from 213.254.204.197. The packet is rejected ".? The

IP address is not the same all the time and changes frequently. I have checked

my DNS settings and every thing looks Okay. I have also checked Microsoft

knowledge base and it has not been helpful.

I was wondering if there is a way to fix this problem and block these invalid

domain names at our Cisco 2801 router before they get to our LAN.

I am not running IOS Firewall on this router. We use a PIX Firewall before the 2801 router.

Thank you,

Hossein Kholghi

Abington Friends School

1 Reply 1

bwilmoth
Level 5
Level 5

DNS cache pollution protection is enabled by default in Windows 2000 SP3 and later.

http://support.microsoft.com/kb/316786

http://support.microsoft.com/kb/241352

Review Cisco Networking products for a $25 gift card