[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Thank you, Comcast.

Subject: Thank you, Comcast.
From: rdobbins at arbor.net (Roland Dobbins)
Date: Fri, 26 Feb 2016 20:53:41 +0700
In-reply-to: <[email protected]>
References: <1310695257.13597.1456458114690.JavaMail.mhammett@ThunderFuck> <1341162075.13611.1456458371134.JavaMail.mhammett@ThunderFuck> <CAJayEpEU9aNHBnf+dG0KMypZmp7rQx-Ycz321-zWXi5anGfrUQ@mail.gmail.com> <[email protected]> <[email protected]> <[email protected]>

On 26 Feb 2016, at 20:17, Nick Hilliard wrote:

>  If you block packets with udp src port=53 towards
> customers, you will also block legitimate return traffic if the
> customers run their own DNS servers or use opendns / google dns / etc.

Actually, what they're talking about is blocking packets *destined* for 
UDP/53 on broadband access networks, not *sourced from*.

-----------------------------------
Roland Dobbins <rdobbins at arbor.net>

References:
- Thank you, Comcast.
  - From: nanog at ics-il.net (Mike Hammett)
- Thank you, Comcast.
  - From: paras at protrafsolutions.com (Paras Jha)
- Thank you, Comcast.
  - From: jared at puck.nether.net (Jared Mauch)
- Thank you, Comcast.
  - From: swmike at swm.pp.se (Mikael Abrahamsson)
- Thank you, Comcast.
  - From: nick at foobar.org (Nick Hilliard)

Prev by Date: Brighthouse Networks security contact?
Next by Date: Thank you, Comcast.
Previous by thread: Thank you, Comcast.
Next by thread: Thank you, Comcast.
Index(es):
- Date
- Thread