|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] DNS TCP
Check the archives for the past week or so. There was a long thread about this. In a nutshell: you need UDP & TCP port 53 open. 53/TCP handles zone transfers as well as any DNS request over 512 bytes (did I get that right?) if you just run a caching DNS server you can probably get away with keeping TCP 53 closed, but it *can* cause problems. For ex I ran our DNS servers with 53/tcp closed at the FW for a *long* time (nearly a year) and have never had a complaint from any user about reachability. I was lucky. >>> "Holland, Stephen" <[email protected]> 05/09/02 11:44AM >>> Could someone give me a security explanation on the good, bad, need or not need to open up TCP port 53 to the outside world. Is there a need for TCP 53, if it should be open to whom (local ISP???), is there EVER a need for it, if so when and why? Thanks for all your replies ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
