[H-GEN] Bind from behind a firewall

Snowy Angelique Maslov aka 'Snowpony' snowy at snowy.org
Wed Sep 10 22:34:14 EDT 2003


[ Humbug *General* list - semi-serious discussions about Humbug and     ]
[ Unix-related topics. Posts from non-subscribed addresses will vanish. ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 11 Sep 2003, Greg Black wrote:

> > > That has been set up since day one but no luck - will add UDP to see if that
> > > fixes it.
> > 
> > Considering DNS uses UDP & TCP - Im guessing it will particular since UDP is 
> > used for queries and TCP for zone transfers ;).
> 
> Close, but not quite right -- UDP is used for queries that fit
> in a UDP packet; TCP is the fallback mechanism for queries whose
> answers are truncated in a UDP response.  In any event,
> firewalls need a hole punched through them for both TCP and UDP
> on port 53.

Indeed you are correct there; I oversimplified.  Apologies.

- -- 
Snowy "Snowpony" Angelique Cerise Maslov -- http://snowy.org/email.signature
PGP (GnuPG) fingerprint = 5280 6EBC D281 A9D2 564B  E274 B2EC 54C3 8325 CECD
Email not addressed/CCd to snowy at snowy.org BOUNCE.  READ URL for disclaimer!
   "Ignorance killed the cat, sir. Curiosity was framed." ---C.J. Cherryh
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/

iD8DBQE/X98msuxUw4Mlzs0RAkjVAJ9Mbeph+ZPeETumfNFbwbOxZOgdhgCfYcwz
B/JsQMDXkl3MNbL35Dys/fU=
=/chC
-----END PGP SIGNATURE-----


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.  See http://www.humbug.org.au/



More information about the General mailing list