RE: [Fwbuilder-discussion] Should FW have DNS name?

Read your dropped packets..... That will tell you what's going on.

tedc

-----Original Message-----
From: fwbuilder-discussion-bounces@lists.sourceforge.net
[mailto:fwbuilder-discussion-bounces@lists.sourceforge.net] On Behalf Of
Nigel Stepp
Sent: Friday, June 09, 2006 4:05 PM
To: Ralph Forsythe
Cc: Bob Radvanovsky; firewalls@securityfocus.com;
fwbuilder-discussion@lists.sourceforge.net; Bill Smith
Subject: Re: [Fwbuilder-discussion] Should FW have DNS name?

Ralph Forsythe wrote:
> I think even something like 'goaway.domain.com' isn't necessarily good,
> since in an effort to hide what it is, you've still told them it's
> something they want to play with.

One must remember, however, that anyone looking to break into your
network will probably not be looking at hostnames a priori anyway.
Things will most likely start with a scan of an IP block, then
traceroute or similar will tell you what's up front.

As others have said, an A record for your firewall should be perfectly
safe.  I even think a PTR record would do little to no harm.

You still have to make sure your firewall is secure, of course; but no
more than if you didn't have a name in DNS.

-- 
:wq



_______________________________________________
Fwbuilder-discussion mailing list
Fwbuilder-discussion@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/fwbuilder-discussion