[Tfug] Multiple distros for security?

[Brian Murphy]

Quoting Matt Jacob <matt at mattjacob.com>:
> It's a little trickier than firewalling off the recursive
> servers, though. Those need to be customer-facing and
> publicly-accessible.


This is a little weird.  The only situation that immediately comes to
mind is if you're running bogus top level domains that aren't published
on the internet.

Otherwise if you have a remote client, their ISP will give them a
recursive server with their IP address info.

If you're the one controlling the client IP addresses, you should be
able to stop the internet hitting the internal caching server at your
network border.

Brian

The opinions or statements expressed herein are my own and should not be
taken as a position, opinion, or endorsement of the University of
Arizona.