Reg:dns inspect invalid packet

[shasun]

hi,

i received a lot of error for dns. how i can solve this? pls help

[zulqurnain]

Hi,

Can you please explain the error or copy paste the log file , it would help understand it

Sent from Cisco Technical Support iPad App

[shasun]

Hi,

%ASA-3-305005: No translation group found for tcp src remote:10.85.125.177/52782 dst inside:172.x.x.x/53

while i checking through the packet tracer, it shows dns inspect invalid packet.

[Kureli Sankar]

Do you have nat 0 with acl configured? Does the ACl include these two hosts in question?

Could you pls upload the packet tracer output as well as the config from the firewall?

-Kureli

[shasun]

Hi,

thanks for your reply.

i solved the problem.

thirumalai