With the change coming on May 5th; DNSSEC - The DNS Security Extensions - Protocol Home Page.
I'm assuming that the packet filter we won't have problems since the default Service Definition for DNS port 53 is TCP/UDP already.
But I thought I would ask about
1) The DNS proxy (I think it's DNS Masq correct me if I'm mistaken).
2) IPS, is there anything in there that would freak out if the TCP packets of greater than 512k occur.
We use opendns as our default upstream provider so I'm not sweating it but I thought the question worthy of discussion here.
This thread was automatically locked due to age.