[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] DNS Question
Sadir Al-khafaji wrote: > > What is incorrect ! AFAIK 53/TCP is used for zone transfers please > correct me if i am wrong. ???Dear Don please refer to RFC 1035 Please read RFC1035 more carefully, 4.2. Transport The DNS assumes that messages will be transmitted as datagrams or in a byte stream carried by a virtual circuit. While virtual circuits can be ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ used for any DNS activity, datagrams are preferred for queries due to ^^^^^^^^^^^^^^^^^^^^^^^^^ their lower overhead and better performance. Zone refresh activities must use virtual circuits because of the need for reliable transfer. The Internet supports name server access using TCP [RFC-793] on server port 53 (decimal) as well as datagram access using UDP [RFC-768] on UDP port 53 (decimal). 4.2.1. UDP usage Messages sent using UDP user server port 53 (decimal). Messages carried by UDP are restricted to 512 bytes (not counting the IP or UDP headers). Longer messages are truncated and the TC bit is set in the header. So, virtual circuits (TCP) can be used for _any_ activity, zone transfers or queries. Datagrams (UDP) are preferred for queries, but cannot be used for messages that contain more than 512 bytes. This means that TCP must be used for queries that involved messages containing more than 512 bytes. Technically, a DNS server must allow access to 53/udp and 53/tcp to be a real, compliant Internet nameserver. -- Crist J. Clark [email protected] Globalstar CommunicationsThe information contained in this e-mail message is confidential, intended only for the use of the individual or entity named above. If the reader of this e-mail is not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any review, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this e-mail in error, please contact [email protected] ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|