The firewall probably keeps its on DNS cache for having better performance, but this surely hurts the performance.. Eran. On Sun, 15 Apr 2001, Alex Shnitman wrote: > Hi, ishaybas! > > On Sun, Apr 15, 2001 at 04:59:37PM +0200, you wrote the following: > > > Some firewalls (checkpoint) allow you to block by dns domain name. > > you just block all traffic to .icq.com, .mirabilis.com, end of story. > > Does this mean that for every packet that goes through the firewall, > it runs a DNS reverse lookup to find the hostname of the destination? > I just wonder what kind of performance this firewall delivers. > > Sounds very strange to me. > > > -- > Alex Shnitman <[EMAIL PROTECTED]> > http://alexsh.hectic.net/ UIN 188956 > PGP 0xEC5D619D / E1 F2 7B 6C A0 31 80 28 63 B8 02 BA 65 C7 8B BA > > ================================================================= > To unsubscribe, send mail to [EMAIL PROTECTED] with > the word "unsubscribe" in the message body, e.g., run the command > echo unsubscribe | mail [EMAIL PROTECTED] > > ================================================================= To unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
