Alias with udp error !_! (PIX 515E)

[eddie195hk]

Hi all,

We have a little problem with using alias command. The DNS packet come back with udp error after we apply alias. Although I checked that the packet IP has been changed to what we want. The most wonderful stuff is some of the domain name works. But most of the domain name reply contain error.

By the way, really thanks for that TAC engineer suggest to use fixup protocol before. But now the problem is our version is not 6.x and up. We can't use fixup protocol dns and sysopt noproxarp is not show up in mem neither.

Is that any solution to fix this problem instead of upgrading?

I found Resolved Caveats at 6.x

CSCds14773 Checksum error when alias command is activated. Is it related?

Thank for you to read my post.

Eddie

[gfullage]

If the "udp error" you mention is a bad checksum then yes, this may be your bug, although this bug is linked to CSCds90641 (http://www.cisco.com/cgi-bin/Support/Bugtool/onebug.pl?bugid=CSCds90641&Submit=Search) which is fixed in 5.2(4), 5.3(2) and various 6.x versions. You don't mention what code level you're running, but if it's less than these then I would suggest upgrading to it and it should resolve your problem.