IOS NAT ALG support for DNS using TCP

[spyoung]

Hi,

I have been digging around on CCO for any documentation that describes if the DNS ALG in IOS NAT supports TCP based session (zone xfers, truncated responses).

I know the NAT ALG works nicely for UDP based DNS answers (DNS doctoring works) but with TCP it seems to silently ignore the DNS packet contents and not translate them.

Is TCP not supported?

Thanks alot,

S

[s.jankowski]

NAT-PT currently provides limited Application Layer Gateway (ALG) support. ALG support for Internet Control Message Protocol (ICMP), File Transfer Protocol (FTP), and Domain Naming System (DNS) is provided, and future Cisco IOS releases will have ALG support similar to NAT for other applications

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123cgcr/ipv6_c/sa_natpt.htm

[spyoung]

Thanks, but Im only using IPv4, not IPv6 so NAT-PT is not applicable.