[dns-operations] DNS Issue

Jared Mauch jared at puck.nether.net
Fri Apr 26 15:12:47 UTC 2013

On Apr 26, 2013, at 8:24 AM, "Cihan SUBASI \(GARANTI TEKNOLOJI\)" <CihanS at garanti.com.tr> wrote:

> Also can someone explain why tcp53 should be allowed on the firewalls if dns is behind a firewall?


> And why auditors do not like tcp53 open to public?

Because someone told them the wrong thing and they don't know any difference.  Just because they're an auditor doesn't mean they are clued.  Simple thing would be to show them a dns query that requires tcp, such as:

Jareds-Mac-mini:~% dig txt nether.net. @

- Jared

More information about the dns-operations mailing list