From owner-freebsd-questions@FreeBSD.ORG Fri Aug 5 16:41:04 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 287AC1065678 for ; Fri, 5 Aug 2011 16:41:04 +0000 (UTC) (envelope-from feld@feld.me) Received: from mwi1.coffeenet.org (unknown [IPv6:2607:f4e0:100:300::2]) by mx1.freebsd.org (Postfix) with ESMTP id E717F8FC16 for ; Fri, 5 Aug 2011 16:41:03 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=feld.me; s=blargle; h=In-Reply-To:Message-Id:From:Mime-Version:Date:References:Subject:To:Content-Type; bh=fz1wlcg/8Ifa4fHUihKZozNgIEieUTppIVFllA9KM/M=; b=RCe1V5NqffiXHYjKJSuhmYBDQlNDJtsM/MpmTBxLDBH8ysZgK/bHdBmaPJ0+aE/1TVH5QnNzB1tk/zRuGuC57mHNVzdT+bngw8Qhj9F3eb8dgj4cHr133xKutaOdjxyC; Received: from localhost ([127.0.0.1] helo=mwi1.coffeenet.org) by mwi1.coffeenet.org with esmtp (Exim 4.76 (FreeBSD)) (envelope-from ) id 1QpNVT-0004pl-7p for freebsd-questions@freebsd.org; Fri, 05 Aug 2011 11:44:20 -0500 Received: from feld@feld.me by mwi1.coffeenet.org (Archiveopteryx 3.1.4) with esmtpsa id 1312562653-1570-1569/5/1; Fri, 5 Aug 2011 16:44:13 +0000 Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes To: freebsd-questions@freebsd.org References: <4E3C1719.7030509@mykitchentable.net> Date: Fri, 5 Aug 2011 11:40:56 -0500 Mime-Version: 1.0 From: Mark Felder Message-Id: In-Reply-To: <4E3C1719.7030509@mykitchentable.net> User-Agent: Opera Mail/12.00 (FreeBSD) X-SA-Score: -1.0 Subject: Re: Help with Bind Weirdness & Logging X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 05 Aug 2011 16:41:04 -0000 On Fri, 05 Aug 2011 11:15:21 -0500, Drew Tomlinson wrote: > Just recently, I noticed that my server can't resolve for some names. > The ones I've noticed are for Microsoft domains, specifically > go.microsoft.com and time.windows.com. For example: > What kind of firewall stuff are you doing? Is it possible you're dropping the DNS replies when they're TCP? This happens when the reply is a certain size. Cheers, Mark