Firewall Wizards mailing list archives

Re: dns outbound


From: wyllys () reston wcom net
Date: Wed, 19 May 1999 17:37:06 -0400 (EDT)




Why the heck would clients need external access to DNS servers? Barring the
occasional network management application, there should be no reason a client
needs direct access to a DNS server (that I can think of). 


There are plenty of reasons why internal machines need to resolve
external names.  


  ... and you have apparently assumed that they cannot do this without the 
requested direct access, despite a thread full of posts from knowledgable 
people explaining that this assumption is not true of properly-configured 
networks.


No, I just misunderstood the question.  I thought the
original poster was questioning the need for external DNS resolution,
not the need for direct access to external servers, my mistake.  I think 
others have also confused the two issues as well.   

-wyllys





Current thread: