<HTML>
<font style="font-family: tahoma; font-size: 10pt;"><div style="font-family:
tahoma; font-size: 10pt;">I installed fresh installation of solaris 10 on
sparc machine with latest bind v9,this server is behind the hardware
Firewall(policy from out to in is udp53&from in to out is any).</div>
<div>But my cisco IDS always announces this alarm from my server to other
external clients or servers:<br><br>"Fragment Flags Invalid"<br> <br>
Src Address Dst Address Signature Name<br>192.168.1.1
x.x.x.x Fragment Flags Invalid</div><div> Here is my
named.conf:</div><div>options {<br>
version "version not currently
available";<br> pid-file
".../run/named.pid";<br> directory
".../named/namedb";<br> dump-file
".../named.dump";<br>
recursive-clients 10000;<br>
statistics-file "..../namedb/statistics";<br>
tcp-clients 1000;<br>
allow-recursion {<br>
any;<br> };<br>};<br><br>logging
{<br> channel simple_log {<br>
file "/var/adm/named/bind.log" versions 3 size 50m;<br>
print-category yes;<br>
print-severity yes;<br>
print-time yes;<br>
severity warning;<br> };<br>
category default {<br>
simple_log;<br> };<br>};<br><br>
key "rndc-key" {<br> algorithm
,,,,,,,,,;<br> secret "************";<br>
};<br><br> controls {<br>
inet 127.0.0.1 port 953<br>
allow { 127.0.0.1; } keys { "rndc-key"; };<br> }; </div><div><br>
<br>does anybody have idea about this alarm? can i fix this error by tunning
bind?</div><div style="font-family: tahoma; font-size: 10pt;">Regards <br>
</div></font>
</HTML>