On Fri, 20 Oct 2000, Dean Pentcheff wrote:

>Joi Ellis wrote:
>> On Tue, 17 Oct 2000, Jonathan D. Proulx wrote:
>...
>> I'm also not sure I'd want the identity of my tape backup server
>> visible with simple DNS queries, either.  That makes it a juicy
>> target.
>> 
>You should be aware that a trivial port scan of the network will reveal
>the Amanda hosts, so there's not much to be gained by a simple name
>obfuscation.  An example from our network:

Well, yes, except that, until just last month, our DNS was managed by
our ISP, and they published the entries for everything we gave them.
The only service-like name we gave them was 'mail', everything else was
simple host names.

Now that we have our own internal DNS, we have fewer machines published.
I hope..  

-- 
Joi Ellis
[EMAIL PROTECTED], http://www.visi.com/~gyles19/

Reply via email to