i have windows 2003 sp1 dns and when using checkpoint smartdefense i get a
lot of domain-udp out-of-state reply.
what could be the problem

In news:%23Dt9%239FKHHA.2140@TK2MSFTNGP03.phx.gbl,
sham <shamun@mekorot.co.il> stated, which I commented on below:
> i have windows 2003 sp1 dns and when using checkpoint smartdefense i
> get a lot of domain-udp out-of-state reply.
> what could be the problem

My first thought on this is EDNS0. Windows 2003 supports EDNS0, which allows
UDP packets upto 1280 bytes, which is beyond the old 512 limit. If this is
the issue, you'll need to allow this traffic. If it doesn't support EDNS0,
you'll need to upgrade Checkpoint to the latest version.

--
Ace
Innovative IT Concepts, Inc (IITCI)
Willow Grove, PA

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.
It's easy:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only constant in life is change...