[c-nsp] ASA Static Translations / DNS Doctoring

Roland Dobbins rdobbins at arbor.net
Fri Jul 17 15:11:43 EDT 2009


On Jul 18, 2009, at 2:05 AM, Clue Store wrote:

> I agree that this is not a good idea, solution, or practice, but  
> when one is
> requested to perform a task a particular way and that task is what  
> generates
> my revenue, best practice does not apply.

For myself, I'd refuse to do the work due to the potential for  
liability; as you're going ahead with it, I strongly suggest you get  
your customer's acknowledgement in writing that you've warned him  
about the dangers of this setup and that he's insisting upon it,  
anyways, so that when it eventually falls over, you're in the clear.

;>

-----------------------------------------------------------------------
Roland Dobbins <rdobbins at arbor.net> // <http://www.arbornetworks.com>

         Unfortunately, inefficiency scales really well.

		   -- Kevin Lawton



More information about the cisco-nsp mailing list