<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Yes, look for “port” configuration in the documentation: <a href="https://bind9.readthedocs.io/en/v9_16_25/">https://bind9.readthedocs.io/en/v9_16_25/</a><div><br></div><div>You can configure the upstream to listen on non-standard port and the downstream to use it. We use this internally in the system tests.<br><br>As a side note please separate the technical questions and rants. The experience shows that sticking to the technical questions leads to more pleasant experience on the mailing list. Thanks.<br><br>Ondrej<br><div dir="ltr"><div>--</div>Ondřej Surý — ISC (He/Him)<div><br></div><div>My working hours and your working hours may be different. Please do not feel obligated to reply outside your normal working hours.</div></div><div dir="ltr"><br><blockquote type="cite">On 11. 2. 2022, at 16:21, Tim Daneliuk via bind-users <bind-users@lists.isc.org> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><span></span><br><span>After some months of poking around, we are now certain that our so-called "Business"</span><br><span>service from Comcast is compromising our DNS servers because of their</span><br><span>execrable "Security Edge" garbage. (They are willing to remove this 'service'</span><br><span>only if we are willing to incur a higher monthly recurring fee.)</span><br><span></span><br><span>Our master is in the wild and works fine, but the slave is behind the compromised</span><br><span>Comcast pipe. The effect of having Security Edge in place is that the</span><br><span>slave cannot get updates from the master and is also unable to resolve</span><br><span>anything outside our own zone. Comcast is apparently hijacking all port</span><br><span>53 requests and doing unspeakable things with them.</span><br><span></span><br><span>Is there a way to have these servers work as usual, listening to resolution</span><br><span>request on port 53, but have the slave update AND forward requests to the</span><br><span>master over a non-standard port, so as to work around the Comcast madness?</span><br><span></span><br><span>TIA,</span><br><span>Tim</span><br><span></span><br><span>P.S. My guess is that this so-call "security" service is no such thing, or at</span><br><span> least its not the only thing. They are probably harvesting DNS lookups</span><br><span> to sell as marketing data, or at least that would be my first guess.</span><br><span>-- </span><br><span>Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list</span><br><span></span><br><span>ISC funds the development of this software with paid support subscriptions. Contact us at https://www.isc.org/contact/ for more information.</span><br><span></span><br><span></span><br><span>bind-users mailing list</span><br><span>bind-users@lists.isc.org</span><br><span>https://lists.isc.org/mailman/listinfo/bind-users</span><br></div></blockquote></div></body></html>