DNSSEC BIND9 Configuration Summary and Cool StuffHow to DNSSEC sign your DNS zones with BIND9 August 20, 2010 rfcaxfrtcpdns
tcp/53 isn't just for AXFRYou’re not just opening UDP/53 for DNS, are you…? March 18, 2010 rfcaxfrtcpdns