> Am I right to assume that doing a reverse lookup on the requesting > host is also bad? I'm not aware of any standard that states that's > acceptable either... This will hit my DNS server and not the end host. I would not consider a reverse lookup very intrusive.