If you had a choice between having the DNS outside the firewall or behind the firewall which one would you pick? This controversy is creating turmoil in our office. One of the engineers wants the DNS in the DMZ and the other would like to have it inside. What are the pros and cons of both sides? Thanks for your help.