domain-tcp

[Barry Margolin]

In article <clskve$2emj$1 at sf1.isc.org>,
 Norman Zhang <norman.zhang at rd.arkonnetworks.com> wrote:

> Hi,
> 
> Both domain-udp and domain-tcp are required for domain lookup. As long 
> as I restrictive the domain transfer on bind, then it is safe to set a 
> firewall rule
> 
> any->any->domain_udp,domain_tcp->accept?

I don't recognize that firewall syntax, but I think the answer to your 
question is yes.

-- 
Barry Margolin, barmar at alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***