Re: [PEN-TEST] DNS testing tool

["Gary E. Miller" <gem () RELLIM COM>]

Yo Laura!

On Wed, 7 Mar 2001, [iso-8859-1] Laura Nu?ez wrote:

>       I have this, by the moment
>               - Assign reverse DNS to only those host that require it

IMHO, I think this is wrong.

Not having reverse DNS is just security by obscurity.  Script
kiddies will just use a tool like nmap to sweep you entire IP
range.

You break a lot of things by not having a full reverse DNS.

A full and matching forward and reverse DNS is mandated by the RFCs.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 20340 Empire Ave, Suite E-3, Bend, OR 97701
        gem () rellim com  Tel:+1(541)382-8588 Fax: +1(541)382-8676