DNSSEC and ISAKMP?

Alan Clegg aclegg at isc.org
Fri Apr 16 14:16:53 UTC 2010


On 4/16/2010 9:49 AM, Deny IP Any Any wrote:
> Do I need to allow UDP/500 packets (ISAKMP) to my bind DNS servers for DNSSEC?
> 
> I've been seeing a lot of UDP/500 attempts from the general internet
> to my public DNS servers, and can't figure out why. The Wikipedia page
> for DNSSEC doesn't mention anything about ISAKMP or VPN tunnels.

DNSSEC and ISAKMP are not related.

AlanC


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 260 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20100416/f7e2ba37/attachment.bin>


More information about the bind-users mailing list