RE: DNS zone transfer

[David Schwartz <davids () webmaster com>]

On Sun, 9 Jun 2002 20:49:37 -0300, Maximiliano Perez wrote:

> We all know that tcp filtering is a very common practice.

         A DNS server that is authoritative for a zone must not filter TCP. The
relevant standards do not specify any preference for UDP over TCP. A client
could legitimately issue all its DNS queries using TCP. Claiming that you
will provide DNS service for a zone and then failing to provide that service
due to filtering is the network equivalent of fraud.

        If you have any standards that contradict this, cite them.

        DS