Is Google down?

[silencio]

...can't get to it.

[MobilePCPhysician]

...can't get to it.

Works fine for me Sil.

[shamus]

me too..

[silencio]

Got it, and man, this has been driving my buggy for a while. It was only effecting yahoo for awhile but tonight it started effecting google so something had to be done. In a nutshell, it was a Microsoft/PIX DNS issue. DNS queries that returned an answer larger than 512K were rejected at the PIX.

Maybe NooNoo could move this to tech tips..

Document here.

SYMPTOMS

When a computer that is running Microsoft Windows Server 2003 makes an external DNS query, you may receive one of the following error messages:
Query Refused

Server unable to interpret format

Timeout

CAUSE

Cause #1

This problem may occur on some Cisco PIX Firewall models with software that is earlier than PIX Firewall version 6.3(2). The Cisco PIX Firewall drops DNS packets sent to User Datagram Protocol (UDP) port 53 that are larger than the configured maximum length. By default, the maximum length for UDP packets is 512 bytes. Cause #2

This problem may occur if the external DNS server does not support Extension Mechanisms for DNS (EDNS0) or if a firewall exists between your server and the external DNS server. DNS servers that do not support EDNS0 cannot process EDNS0 data, and this behavior causes the query to fail. Some firewalls may drop the EDNS0 packets that are sent by servers that support EDNS0, or may drop UDP packets that are larger than 512 bytes that are sent by servers that support EDNS0.
WORKAROUND

Workaround #1

To resolve this problem, visit the following Cisco Systems Web site for information and update instructions: http://www.cisco.com/en/US/products/sw/secursw/ps2120/prod_release_note09186a00801a6d21.html#110415
Workaround #2

To work around this problem, turn off EDNS0 support in Windows Server 2003. To do this, follow these steps: 1.Start a command prompt.2.Type dnscmd /Config /EnableEDnsProbes 0, and then press ENTER.

[TripleRLtd]

Good heads up Silence.
So, you're browsing WD with Win2k3 Server?

[silencio]

Good heads up Silence.
So, you're browsing WD with Win2k3 Server?

Naa. I don't do any browsing from the servers. I have a domain in the house.

[TripleRLtd]

I figured as much.
Just playing man.

[Platypus]

Google down...?

Mmmm soft !