[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]


To: Brad Knowles <brad.knowles@skynet.be>
Cc: dnsop@cafax.se
From: Ed Sawicki <ed@alcpress.com>
Date: 21 Feb 2003 00:44:03 -0800
In-Reply-To: <a05200f44ba7b225261dc@[10.0.1.4]>
Sender: owner-dnsop@cafax.se
Subject: Re: Why one port?

On Thu, 2003-02-20 at 16:25, Brad Knowles wrote:
> At 11:03 AM -0800 2003/02/20, Ed Sawicki wrote:
> 
> >  I'm wondering why there is only one UDP port assigned to the DNS
> >  protocol?
> 
> 	That's the way the standard was originally written.
> 
> >            It prevents us from using both an iterative name
> >  server and a recursive name server/cache on the same computer
> >  when only one IP address is available.
> 
> 	Yup.  That's a big problem for programs that can't handle both 
> functions in one codebase.

I want my systems to be as secure from attack as possible. To me,
this means never allowing both functions to be provided by the
same codebase.

-- 
Ed Sawicki <ed@alcpress.com>
ALC

#----------------------------------------------------------------------
# To unsubscribe, send a message to <dnsop-request@cafax.se>.

Home | Date list | Subject list