OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
NFR Wizards Archive: DNS -vs- the firewall: security thoughts

DNS -vs- the firewall: security thoughts

Bennett Todd (betrahul.net)
Mon, 9 Mar 1998 03:51:00 -0800

I'm currently contemplating a serious redesign, doing away with DNS from
the internet altogether. We use _nothing_ but non-transparent proxies on
the firewall, so I can't see any good reason why end-user workstations
should need to be able to resolve internet hostnames. I'd really love to
chop that off altogether; people are getting cleverer about using
bizarrely-corrupted DNS data to burgle systems.

-Bennett

This archive was generated by hypermail 2.0b3 on Sat Jul 17 1999 - 07:10:40 CDT