topic Reg:dns inspect invalid packet in Network Security

Reg:dns inspect invalid packet

shasun — Mon, 11 Mar 2019 21:46:54 GMT

hi,

i received a lot of error for dns. how i can solve this? pls help

zulqurnain — Mon, 07 Nov 2011 12:19:16 GMT

Hi,

Can you please explain the error or copy paste the log file , it would help understand it

Sent from Cisco Technical Support iPad App

shasun — Mon, 07 Nov 2011 12:58:47 GMT

Hi,

%ASA-3-305005: No translation group found for tcp src remote:10.85.125.177/52782 dst inside:172.x.x.x/53

while i checking through the packet tracer, it shows dns inspect invalid packet.

Kureli Sankar — Mon, 07 Nov 2011 16:21:36 GMT

Do you have nat 0 with acl configured? Does the ACl include these two hosts in question?

Could you pls upload the packet tracer output as well as the config from the firewall?

-Kureli

shasun — Thu, 10 Nov 2011 05:58:45 GMT

Hi,

thanks for your reply.

i solved the problem.

thirumalai