Syslog 106007 Message - Why?

[don-brown]

The way I read the docs, these packets should pass through to the inside and I shouldn't get this syslog msg. What am I missing?

I receive the following syslog msg:

%PIX-2-106007: Deny inbound UDP from 63.210.165.1 (dl-gw-sd.websense.com) /26425 to 216.14.34.4 (ns1.inetconcepts.net) /53 due to DNS Query

The following is in the ACL bound to the outside interface:

access-list outsideacl permit udp any gt 1023 216.14.34.4 255.255.255.252 eq 53

Pix version 6.3(4)

[harishtandon23]

Hello Don,

Here is the explanation of the following syslog message:

106007

Error Message %PIX-2-106007: Deny inbound UDP from outside_address/outside_port to

inside_address/inside_port due to DNS {Response|Query}.

Explanation This is a connection-related message. This message is logged if a UDP packet containing a DNS query or response is denied.

Recommended Action If the inside port number is 53, it is likely that the inside host is set up as a caching nameserver. Add an access-list command statement to permit traffic on UDP port 53. If the outside port number is 53, the most likely cause is that a DNS server was too slow to respond, and the query was answered by another server.

As i checked the access-list command. Lets try the following access-list command instead and see if that helps?

access-list outsideacl permit udp any host 216.14.34.4 eq 53

wr mem

cl xlate

If you have any questions, please feel free to contact me.

Thanks & Regards,

Harish Tandon

harishtandon23@gmail.com