Skrevet av Emne: Juniper SRX: Add support for EDNS  (Lest 5785 ganger)

ATC

  • Gjest
Juniper SRX: Add support for EDNS
« på: 18. Juni 2010, 13:26 pm »
  • [applaud]0
  • [smite]0
  • Cisco and Juniper firewalls by default limits DNS UDP packets to a maximum size of 512 bytes. Windows Server 2008 by default ships with EDNS enabled, which utilizes DNS packets larger than 512 bytes. How do I enable support for this?



    ATC

    • Gjest
    [Solved] Juniper SRX: Add support for EDNS
    « Svar #1 på: 18. Juni 2010, 13:26 pm »
  • [applaud]0
  • [smite]0
  • "set security alg dns maximum-message-length 1500"
    This adjusts the maximum UDP message size for DNS packets to 1500 bytes. If you allow even bigger packets (check MTU/MRU) then adjust the number accordingly.