[dns-operations] EDNS and TLDs

[Florian Weimer]

On 10/29/2016 11:06 AM, Phil Regnauld wrote:
> Mark Andrews (marka) writes:
>>
>> Thanks.  Firewall are the biggest problems at the moment.
>
> 	Firewalls in front of DNS servers still puzzle me.

If you want to run BIND, a packet filter in front of it currently is the 
only way to switch off processing of DNS UPDATE messages in BIND, so I 
can see why people do this.

Florian