Firewall Wizards mailing list archives
Help
From: Dave Piscitello <dave () corecom com>
Date: Wed, 15 Nov 2006 07:25:37 -0500
Can I ask some of you who live behind commercial firewalls to do the following DNS dig for a small study I would like to conduct?
dig hk ns +bufsize=4096 @203.119.2.18 > <file>If you could tell me the OS you used to dig, the firewall between your resolver and the name server and if you know, the firewall SW version, you'd really make my day. BTW, if you don't get an answer, that is a very useful data point.
I am trying to gather some anecdotal evidence regarding how firewalls deal with EDNS0 responses (esp. DNS messages > 512) and AAAA records.
I have results for Netscreen (ScreenOS V5.30r3, 4.0.3r4.0) Sonicwall (SonicOS Standard 3.1.0.7-77s) Cisco PIX version 7.2.1 Cisco C2600 IOS 12.2(37) Watchguard FBX1000 (Fireware v8.2)I could really use some data from current and previous versions of Checkpoint, Symantec, Sidewinder, Fortinet to help fill out the "market share tested" pie chart.
Attachment:
dave.vcf
Description:
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ firewall-wizards mailing list firewall-wizards () listserv icsalabs com https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
Current thread:
- bypassing PIX limitation Paolo Supino (Nov 09)
- <Possible follow-ups>
- Re: bypassing PIX limitation Horvath, Kevin M. (Nov 09)
- Re: bypassing PIX limitation Paolo Supino (Nov 09)
- Re: bypassing PIX limitation Josh (Nov 09)
- Re: bypassing PIX limitation Paolo Supino (Nov 09)
- Re: bypassing PIX limitation David Swafford (Nov 09)
- Re: bypassing PIX limitation Paolo Supino (Nov 11)
- Re: bypassing PIX limitation Marcus J. Ranum (Nov 11)
- Re: bypassing PIX limitation Chris Blask (Nov 11)
- Help Dave Piscitello (Nov 15)
- Re: Help Utz, Ralph (Nov 15)
- Re: Help Aaron Smith (Nov 15)
- Re: bypassing PIX limitation Paolo Supino (Nov 11)
- Re: bypassing PIX limitation Paolo Supino (Nov 11)