DNSSEC and Firewalls (was Re: IPv4 ANYCAST setup)