[c-nsp] Trouble in an ASA migration from CheckPoint

[Rubens Kuhl]

On Mon, May 11, 2009 at 10:11 AM, Marcelo Zilio <ziliomarcelo at gmail.com> wrote:
> Hi Rubens,
>
> Thanks for your response.
>
> I'm sorry, but I didn't understand what you meant...
>
> Remember IPs 200.1.1.1 and 190.1.1.1 are Internet address and I cannot
> control their DNS resolution.

Yes we can! :-)

http://www.oreillynet.com/pub/a/oreilly/networking/news/views_0501.html

In effect, you would answer based on the IP address of the DNS
recursor and not the client itself, but if we are talking big /8s,
that usually has a strong correlation.


Rubens