In message <4F3C2E47.80903 at dougbarton.us>, Doug Barton writes: > > DNS only uses UDP > DNS only uses 512 byte UDP packets > > or maybe just.. > > DNS is easy Or that it is correct/does no harm to filter fragmented packet / icmp. -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: marka at isc.org