On 05/02/2010 12:00 PM, Benedict simon wrote:

> 
> really apprecite your help
> soory for my immature questions
> 

I've told you everything I know about DNSSEC. You can read the RFCs and
web sites about the subject as well as I can. I can assure you that
DNSSEC has not been mentioned on either of the Netfilter lists since I
started archiving them several years ago.

Again -- Shorewall-generated rulesets do not look at anything but the
protocol headers, which are not affected by DNSSEC. PIX and ASA
firewalls are different; they DO look at the payload of packets (as
evidenced by the many problems PIX have caused with email delivery).

-Tom
--
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to