Re: dns outbound

["Ryan Russell" <Ryan.Russell () sybase com>]

Well, how about this...  On a couple of mailing lists
I subscribe to, like this one, I've seen two notes.
One claims that ICQ will automatically try to use
UDP 53 if it doesn't work in it's normal mode.

Another claimed that one of his uses was able to
surf the web without having to authenticate on the
way out, via the DNS rule.

                    Ryan







Hello,

This is going to be a stupid question, but I hope someone can answer the
question without my being flamed :-(.

I have gotten a request to allow all clients behind a firewall to have
unrestricted access to dns servers outside the firewall.

Can I get help in coming up with pros and cons off doing that.  I tried to
search the archives but the search page is not working properly.

I am not comfortable in allowing udp packets outbound from all systems.
If it helps we are using firewall-1.

Thanks
- Deepak