DNSE-742
Prev Kernun UTM Reference (6) Next

Name

DNSE-742 — Nameserver response contains invalid flags

Severity

A (alert)

Message text

%s response from %s has %s bit %s

Description

The response from printed nameserver has incorrect flag setting. There are three possibilities:

  • The response flag (QR) is not set.

  • The truncation (TC) flag is set in the TCP response. The flag is used to inform client that required response cannot fit into UDP packet and should be re-request via TCP connection. In TCP, this flag has no sense and it may be an attempt to compromise client.

  • The reserved bits are not zero.

Whole answer is ignored and next server is tried.

See also

logging(7)

Authors

This man page is a part of Kernun Firewall.
Copyright © 2000–2023 Trusted Network Solutions, a. s.
All rights reserved.

Prev Up Next
DNSE-741 Home DNSE-743