Security Basics mailing list archives

RE: Cisco Workaround

From: "Naman Latif" <naman.latif () inamed com>
Date: Wed, 23 Jul 2003 09:22:15 -0700

No.
DNS uses UDP (or on some cases TCP). Protocol numbers for UDP and TCP
are 17 and 6 respectively. You are denying protocols 53,55,77,103 so DNS
will work as before.

Regards \\ Naman

-----Original Message-----
From: Alvaro Gordon-Escobar [mailto:alvaroge () molecularstaging com] 
Sent: Wednesday, July 23, 2003 7:15 AM

will this access list modification prevent my internal DNS 
server from updates to it self from my telco's DNS server?

access-list 101 deny 53 any any
access-list 101 deny 55 any any
access-list 101 deny 77 any any
access-list 101 deny 103 any any
!--- insert any other previously applied ACL entries here
!--- you must permit other protocols through to allow normal
!--- traffic -- previously defined permit lists will work
!--- or you may use the permit ip any any shown here 
access-list 101 permit ip any any


---------------------------------------------------------------------------
----------------------------------------------------------------------------

Current thread:

Re: Cisco Workaround jamesworld (Jul 23)
- RE: Cisco Workaround Ghaith Nasrawi (Jul 25)
  - RE: Cisco Workaround (comment on actually using those protocols) jamesworld (Jul 28)
  - RE: Cisco Workaround David Gillett (Jul 28)
- <Possible follow-ups>
- RE: Cisco Workaround Naman Latif (Jul 23)
- RE: Cisco Workaround Todd Mitchell - lists (Jul 23)
- RE: Cisco Workaround Charlie Winckless (Jul 23)
- Re: Cisco Workaround DOUGLAS GULLETT (Jul 23)
  - RE: Cisco Workaround Terry Baranski (Jul 24)
  - Re: Cisco Workaround Paul Kincaid (Jul 24)
  - RE: Cisco Workaround Dave Gilmore (Intrusense) (Jul 24)
  - Re: Cisco Workaround Kurt Seifried (Jul 24)
    - RE: Cisco Workaround David Gillett (Jul 24)
  - RE: Cisco Workaround Wolfpaw - Dale Corse (Jul 24)
  - RE: Cisco Workaround Byrne Ghavalas (Jul 24)

(Thread continues...)