DNS LOGS "Martin Walders" <mwalders[ at ]preferredcare.org> 7/6/2007 5:29:56 PM I recently put a new proxy server on line using websecurity from symantec. A few days after this server went online I started getting errors in my DNS logs from this server. These seem to be happening for 30 seconds to a minute at different times each day and occasionally a few times a day. They also don't happen every day. The error messages come in pairs as follows: Source:DNS Event ID:5504 Description:The DNS server encountered an invalid domain name in a packet from 172.16.1.214. The packet will be rejected. The event data contains the DNS packet. Source:DNS Event ID:5505 Description: The DNS server encountered a domain name exceeding the maximum length in the packet from 172.16.1.214. The event data contains the DNS packet. Any suggestions to what might be happening?

Re: DNS LOGS "Ace Fekay [MVP]" <PleaseAskMe[ at ]SomeDomain.com> 7/7/2007 2:47:37 PM In news:u7wjGN$vHHA.3588[ at ]TK2MSFTNGP06.phx.gbl, Martin Walders <mwalders[ at ]preferredcare.org> typed: [Quoted Text] > I recently put a new proxy server on line using websecurity from > symantec. A few days after this server went online I started getting > errors in my DNS logs from this server. These seem to be happening > for 30 seconds to a minute at different times each day and > occasionally a few times a day. They also don't happen every day. The > error messages come in pairs as follows: > Source:DNS Event ID:5504 Description:The DNS server encountered an > invalid domain name in a packet from 172.16.1.214. The packet will be > rejected. The event data contains the DNS packet. > Source:DNS Event ID:5505 Description: The DNS server encountered a > domain name exceeding the maximum length in the packet from > 172.16.1.214. The event data contains the DNS packet. > > Any suggestions to what might be happening? Do you have a forwarder configured in DNS properties to your ISP? Is so, which to? Is your internal AD domain DNS name a single label name (domain rather than domain.com)? Does your AD domain DNS name have any illegal characters? Supported characters are -9, a-z, A-Z, . (dot), and - (hyphen). In DNS properties, select Advanced tab, and ensure that the checbox is checked to prevent DNS Cache Pollution. -- Regards, Ace This posting is provided "AS-IS" with no warranties or guarantees and confers no rights. Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP Microsoft MVP - Directory Services Microsoft Certified Trainer Infinite Diversities in Infinite Combinations Having difficulty reading or finding responses to your post? Instead of the website you're using, try using OEx (Outlook Express or any other newsreader), and configure a news account, pointing to news.microsoft.com. Anonymous access. It's free - no username or password required nor do you need a Newsgroup Usenet account with your ISP. It connects directly to the Microsoft Public Newsgroups. OEx allows you o easily find, track threads, cross-post, sort by date, poster's name, watched threads or subject. It's easy: How to Configure OEx for Internet News http://support.microsoft.com/?id=171164 "Quitting smoking is easy. I've done it a thousand times." - Mark Twain