Re: [FW-1] DNS Question

[Joe McGean <Joe.McGean@FW1-NOSPAMALLIANZ.IE>]

Hi,

As per the good people @SANS:

"The second legitimate use for TCP/53 traffic is when the requested data exceeds
 484 bytes
(512 bytes minus the DNS header). When this occurs, the data request will change
 over from a
UDP/53 to a TCP/53 session. Note that as the name server administrator you have
some level
of control over allowing this to occur."

http://www.sans.org/y2k/lion_protection.htm

Thank you,

Joe McGean
Technical Security Architect

Allianz, Ireland
www.allianz.ie





********************************************************************
Please Note:

Our e-mail address is now 'allianz.ie'

Visit our website at http://www.allianz.ie

Disclaimer :
The information contained and transmitted in this e-mail is
confidential information, and is intended only for the
named recipient to which it is addressed. The content of
this e-mail may not have been sent with the authority of
 the company. If the reader of this message is not the
named recipient or a person  responsible for delivering it
to the named recipient, you are notified that the review,
dissemination, distribution, transmission, printing or copying,
forwarding, or any other use of this message or any part of
it, including any attachments, is strictly prohibited. If you
have received this communication in error, please delete
the e-mail and destroy all record of this communication.
Thank you for your assistance.
********************************************************************

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================