Forums.ATC.no

Teknisk => Generelt teknisk => Emne startet av: ATC på 18. Juni 2010, 13:26 pm

Tittel: Juniper SRX: Add support for EDNS
Skrevet av: ATC på 18. Juni 2010, 13:26 pm

Cisco and Juniper firewalls by default limits DNS UDP packets to a maximum size of 512 bytes. Windows Server 2008 by default ships with EDNS enabled, which utilizes DNS packets larger than 512 bytes. How do I enable support for this?

Tittel: [Solved] Juniper SRX: Add support for EDNS
Skrevet av: ATC på 18. Juni 2010, 13:26 pm

"set security alg dns maximum-message-length 1500"
This adjusts the maximum UDP message size for DNS packets to 1500 bytes. If you allow even bigger packets (check MTU/MRU) then adjust the number accordingly.