> Benedict simon wrote: > >> >> Now I would really apprecte if someone could advise me and help me on >> the >> above issue. do I need to do any change in our firewall or no >> > > DNSSEC changes the DNS payload contents and length but not the header > contents; the latter is all that a packet filter like Netfilter looks at. > Dear Tom,
I really apprecite your quick and immediate reply. But do apprecite and would be really grateful if you could let me know more about it. Actually I was informed by the ISP guys if no change is made as per stated in the mail they sent would not be able to browse and my knowlegde on DNSSEC is limited 1) As I understand from your above reply no need to do any change on my shoreline firewall 2) i ran the below command from my dns server which is behind my shorewall firewall. ip is 91.198.x.x of my dns server $ dig +short rs.dns-oarc.net txt rst.x2027.rs.dns-oarc.net. rst.x3837.x2027.rs.dns-oarc.net. rst.x3843.x3837.x2027.rs.dns-oarc.net. "Tested at 2010-05-02 17:45:08 UTC" "62.215.6.4 sent EDNS buffer size 4096" "62.215.6.4 DNS reply size limit is at least 3843" actually 62.215.6.4 is my ISP DNS server . 3) as mentioned to me in the mail from my ISP are the root servers gonna switch over to DNSSEC on 5th may. so before that I just wanted to be so sure . Is there any other test I could run from my dns server so that my DNS and the shorewall firewall is fine and do not need any change really apprecite your help soory for my immature questions regards simon > -Tom > -- > Tom Eastep \ When I die, I want to go like my Grandfather who > Shoreline, \ died peacefully in his sleep. Not screaming like > Washington, USA \ all of the passengers in his car > http://shorewall.net \________________________________________________ > > ------------------------------------------------------------------------------ > _______________________________________________ > Shorewall-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/shorewall-users > -- Network ADMIN ------------- KUWAIT MUNICIPALITY: -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
------------------------------------------------------------------------------
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
