Re: firewall holes for particular machines

[Chris Green <cmgreen () UAB EDU>]

There's also the old issue where DNS PTR records are controlled by the owner of the IP Block and not the owner of the 
domain. 2 actually requires a reverse lookup and then another forward lookup to validate that the domain is legit. This 
issue crops up commonly now days with webapps that reinvent ACLs.

> -----Original Message-----
>
> 2. If the firewall were to check the DNS name for each and every request,
> besides slowing your network to a crawl, how easy would it be to spoof and
> change the DNS response to the Firewall and therefore manipulate the rules
> or even poison the cache of your DNS servers?