Re: DNS Names for external services

> Just curious, what is your opinions of the security vs. ease of use
> trade-offs on putting DNS entries in (vs. making people know/use an
> IP address) for services you expose to the Internet.

I guess the question is "what are you trying to accomplish?"
If the premise is that it'll slow down a skilled attacker, I
think it's false, because once a penetration has been
accomplished you can map a network using netstat and tcpdup,
and dns names won't really make any difference in that
process.

mjr.
-- 
Marcus J. Ranum		CSO, Tenable Network Security, Inc.
			http://www.tenablesecurity.com