Re: [FW1] Best practice: DNS location

["Barry W. Kokotailo" <merlin@FW1-NOSPAMathabascau.ca>]

Place a private dns name server in the private network. Place the public
dns server
out on one of the dmz's. Several articles written on split dns and
how to harden your dns
name servers from the bad guys. Check out securityportal.com for one
location.

merlin
 
 

Chinnery Paul wrote:

Currently using FW 4.0 on an NT 4.0 network.
Our ISP wants us to install our own DNS and use them as secondary.
My question is where the DNS should be:  should it be on our firewall server
or on our internal network.  We are using NAT.

================================================================================
     To unsubscribe from this mailing list, please see the instructions at
              http://www.checkpoint.com/services/mailing.html
================================================================================

-- 
Barry W. Kokotailo
Senior Unix Systems AdministratorPGP =  71 71 96 A3 C0 C2 23 7A  23 4E D4 04 8C E0 42 6B  B0 2D D1 A5