On Fri, Apr 25, 2014 at 02:22:03PM +0000, Tirumaleswar Reddy (tireddy) wrote:
> 
> Any specific reason for the firewalls to permit TCP/53 other than for zone 
> transfer ?

"Because DNS uses TCP in lots of cases, and always has"?  Anyone who
is still configuring firewalls to deny TCP/53 as a matter of course
ought to have his or her Internet license revoked.

A

-- 
Andrew Sullivan
[email protected]

_______________________________________________
DNSOP mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/dnsop

Reply via email to