Outside DNS Server Located in the DMZ

[David Botham]

bind-users-bounce at isc.org wrote on 02/14/2004 08:23:18 PM:
> Hello,
> 
> Is it common for companies to put their external nameservers in the
> DMZ or (because of possible RDNS problems) do they usually leave them
> on a segment outside of the any firewalls?

I will lock them down, chroot bind, patch the crap out of them, use a 
firewall on the local system, and put them on the net (outside the fw).

Thanks,

Dave...

> 
> Thanks,
> --Lisa Gerlich
>