> Source: [sk180188](https://support.checkpoint.com/results/sk/sk180188)

# sk180188 - "Bad Resource Record format, Illegal RR type in query" error for "Non Compliant DNS" protection

| Property | Value |
|----------|-------|
| Solution ID | sk180188 |
| Date Created | 2022-11-01 |
| Last Modified | 2022-11-08 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * Packet drops with error "Bad Resource Record format, Illegal RR type in query" for protection "Non Compliant DNS".

* The packet drops only occur with R80.40 Jumbo Take 125 or higher.

* Packet capture shows there is an additional TXT record in the DNS request.

## Solution

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.   
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.   
For faster resolution and verification please collect [CPinfo](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739) files from the Security Management and Security Gateways involved in the case.

The hotfix adds a kernel parameter **dns_allow_txt_additional_records** to allow txt additional records in a DNS request.

After the hotfix is installed, set the **dns_allow_txt_additional_records** kernel parameter to 1

* To set the kernel parameter on the fly, run this command in expert mode:

  `[Expert@GW:0]# fw ctl get int dns_allow_txt_additional_records 1`
* For the kernel parameter to survive a reboot, add it to the fwkern.conf file:

  `[Expert@GW:0]# echo dns_allow_txt_additional_records=1 >> $FWDIR/boot/modules/fwkern.conf`

If you have ClusterXL, run the procedure on all the Cluster members.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content