Re: DNS Names for external services

["Marcus J. Ranum" <mjr () ranum com>]

> Just curious, what is your opinions of the security vs. ease of use
> trade-offs on putting DNS entries in (vs. making people know/use an
> IP address) for services you expose to the Internet.

I guess the question is "what are you trying to accomplish?"
If the premise is that it'll slow down a skilled attacker, I
think it's false, because once a penetration has been
accomplished you can map a network using netstat and tcpdup,
and dns names won't really make any difference in that
process.

mjr.
--
Marcus J. Ranum         CSO, Tenable Network Security, Inc.
                        http://www.tenablesecurity.com
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards