RE: [FW1] DNS issues

[Chilton Tim <tim.chilton@FW1-NOSPAMcapco.com>]

You may find it better to do the following :-

1. Configure an internal DNS server for your organisation in caching mode
only
2. Allow the caching server to access the external ISP's DNS
3. Configure hide NAT of the internal DNS address or (internal network)
behind the firewall's external IP address.

This has the advantages that you can then look at the cache to find out
where your users have been going, you can "map out" non-required domains by
setting up your DNS as authoritive for those domains and protect against
some outages of your ISP's DNS - if you already have cached entries no
remote lookups are required !

Cheers

Tim

-----Original Message-----
From: benjamin.c [mailto:benjamin.c@lineone.net]
Sent: 29 September 2000 18:23
To: fw-1-mailinglist@lists.us.checkpoint.com
Subject: [FW1] DNS issues



How do i give internal clients access to external DNS servers,

i have give a rule ,

LocalNET , DNS-servers , any , accepts

buy this does not seem to work

System Administrator 
http://www.Apocolips.org.uk

( ) ( ) ( ) ( ) ( )



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====
************************************************************************
The information in this email is confidential and is intended solely
for the addressee(s).
Access to this email by anyone else is unauthorised. If you are not
an intended recipient, you must not read, use or disseminate the
information contained in the email.
Any views expressed in this message are those of the individual sender,
except where the sender specifically states them to be the views of
The Capital Markets Company.

http://www.capco.com
***********************************************************************



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================