Warning: ID mismatch:

[phn at icke-reklam.ipsec.nu]

Maria Iano <maria at iano.org> wrote:
> Thank you for getting back to me on this. In this case, I don't think it is the firewall, for two reasons. First of all, res1 and res2 are both inside the firewall and on the same network segment. So they send packets directly to eachother. Secondly, restarting named has fixed the issue.

Your firewall might still be broken , it might not handle 
wrapping around query-id correct.

-- 
Peter Håkanson         
        IPSec  Sverige      ( At Gothenburg Riverside )
           Sorry about my e-mail address, but i'm trying to keep spam out,
	   remove "icke-reklam" if you feel for mailing me. Thanx.