RE: Ports for DNS

[Jeffery . Gieser]

#You want 53 135 and I think 137 but you do not want that primary in the
DMZ.
#You will hang, or should I say they will hang you.

You do not nor should you need to run NetBios name services on your
Internet Name Server.  You should only run DNS as this cuts down on
possible paths of attack back into your internal network or possible
information that hackers could gather on your network.  You are much better
off in a split DNS structure to only run the NetBios name service on your
internal DNS server.

Regards,
Jeffery Gieser

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]