Is this a problem with the DNS fixup? I have a new PIX 501 that I have in place on my home network - Its attached to Verizon FiOS via PPPoE. DNS queries from PCs on the network work perfectly, however, the DNS queries initiated by the Verizon CATV Set-Top boxes do not traverse the firewall.
While sniffing inside the PIX, I see the "Standard Query" sent to the proper DNS servers, but no 'Response'. When I sniff outside the PIX, I see *no* Requests nor answers at all. Therefore, the request is not being sent thru the PIX on the way out to the Internet.
Further testing shows that I can put the IP from the Set Top box on my laptop, and I can surf the Internet & DNS queries just fine - this shows that NAT is set up properly.
My Inside and Outside ACLs all say 'permit ip any any', and 'permit icmp any any'.
The ultimate control test - I can take the PIX out of the network, and substitute a simple 3COM SOHO router, and the DNS queries work just fine, and the Set Top box works fine.
What is it about the PIX that would cause some queries to traverse, and other to not traverse? --No permit/deny/errors are logged on syslog when the DNS fails to traverse.
