ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

remove rational behind using a anonymous port for queries

Browse Source
This commit is contained in:
Mark Andrews
2002-01-08 00:34:45 +00:00
parent 6646cc41d7
commit f9ff782e79
1 changed files with 0 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
FAQ
View File

@@ -316,8 +316,3 @@ Q: Why is named listening on UDP port other than 53?
A: Named uses a system selected port to make queries of other nameservers.
This behaviour can be overridden by using query-source to lock down the
port and/or address.
The reason for this behaviour was to correct the mis-perception of firewall
designers that they only had to allow queries from other nameservers (port
53) and not ordinary DNS clients. Named acts like any other DNS client
when making queries. Firewall designers have learnt their lesson.