Home page logo

nanog logo nanog mailing list archives

Re: Open Resolver Problems
From: Mikael Abrahamsson <swmike () swm pp se>
Date: Mon, 1 Apr 2013 20:33:36 +0200 (CEST)

On Mon, 1 Apr 2013, Valdis.Kletnieks () vt edu wrote:

You're sending queries, not replies. That's why DPI is needed to do the blocking, rather than just by port.

What queries are sourced from port 53 nowadays?

I'd imagine it's pretty safe to block Internet->customer UDP/53 packets.

Mikael Abrahamsson    email: swmike () swm pp se

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]