Summary with further Question: Domain Name System protection

Tue Aug 17 19:32:28 UTC 2004

> > 	this should be pushed to
> > 	the router.  don't waste CPU cycles 
> > 	on the Nameserver.
> 
> Hosts tend to be a faster writeoff cycle than routers in companies I've
> worked at, therefore getting the benefit of moores law about 25% faster
> than the routers.  Turn on firewalling in the host.

If you have a choice between access lists on a software forwarding
based router and firewall on a host, this may be a good choice. If
your routers have hardware forwarding, I'd go for the router every
time...

Steinar Haug, Nethelp consulting, sthaug at nethelp.no