topic Re: Issue with DNS on dmz onm ASA 5510 in Network Security https://community.cisco.com/t5/network-security/issue-with-dns-on-dmz-onm-asa-5510/m-p/1565448#M624712 <HTML><HEAD></HEAD><BODY><P>The rule that you have is TCP/53, DNS resolution is on UDP/53. Please allow UDP/53 accordingly.</P><P></P><P>Hope that helps.</P></BODY></HTML> Thu, 30 Sep 2010 10:03:41 GMT Jennifer Halim 2010-09-30T10:03:41Z Issue with DNS on dmz onm ASA 5510 https://community.cisco.com/t5/network-security/issue-with-dns-on-dmz-onm-asa-5510/m-p/1565447#M624694 <P>I have an issue with an server that is connected to a DMZ on a ASA 5510</P><P></P><P>There are errors on the log that says deny inbound udp from "object" to "dns server" due to dns query</P><P></P><P>The rule base has port 53 open and is configured as part of a service group that also has other ports open as well but still issues</P><P></P><P>I have attched config and any help would be appreciated</P><P></P><P>Thanks</P> Mon, 11 Mar 2019 18:47:49 GMT https://community.cisco.com/t5/network-security/issue-with-dns-on-dmz-onm-asa-5510/m-p/1565447#M624694 mburguk1000 2019-03-11T18:47:49Z Re: Issue with DNS on dmz onm ASA 5510 https://community.cisco.com/t5/network-security/issue-with-dns-on-dmz-onm-asa-5510/m-p/1565448#M624712 <HTML><HEAD></HEAD><BODY><P>The rule that you have is TCP/53, DNS resolution is on UDP/53. Please allow UDP/53 accordingly.</P><P></P><P>Hope that helps.</P></BODY></HTML> Thu, 30 Sep 2010 10:03:41 GMT https://community.cisco.com/t5/network-security/issue-with-dns-on-dmz-onm-asa-5510/m-p/1565448#M624712 Jennifer Halim 2010-09-30T10:03:41Z Re: Issue with DNS on dmz onm ASA 5510 https://community.cisco.com/t5/network-security/issue-with-dns-on-dmz-onm-asa-5510/m-p/1565449#M624721 <HTML><HEAD></HEAD><BODY><P>Dns service needs top and udp 53 both ...</P><P></P><P>Udp 53 for name resolutions and Tcp 53 for zone transfers !!! </P><P></P><P>Kamran!</P><P></P><P>Sent from Cisco Technical Support iPad App</P></BODY></HTML> Thu, 16 Feb 2012 08:25:53 GMT https://community.cisco.com/t5/network-security/issue-with-dns-on-dmz-onm-asa-5510/m-p/1565449#M624721 game123 2012-02-16T08:25:53Z