Re: Does blocking TCP DNS packets keep your Bind safe?

[Gary Flynn <flynngn () jmu edu>]

Don Kendrick wrote:
> Why not just block port 53 TCP connections at the border routers except for
> our secondaries. Is it possible to do a buffer overflow or other DNS/Bind
> exploit via UDP? I don't know the answer, I'm asking.

1. I've been told that TCP is an optional fallback and is used for large 
   dataset returns.

2. I tried this once and AOL Instant Messenger broke a few hours
   later to the displeasure of multiple campus users.

-- 
Gary Flynn
Security Engineer - Technical Services
James Madison University

Please R.U.N.S.A.F.E.
http://www.jmu.edu/computing/info-security/engineering/runsafe.shtml
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://www.nfr.com/mailman/listinfo/firewall-wizards