raph@panache.demon.co.uk writes:
A good point that about UDP. don't forget to block *all* UDP input except for named/bind.
Better advice would be to first determine what UDP services you are actually using. You might want NTP as well, for instance.