In article <johnefleming.3wq5mo@no-mx.forums.novell.com>, Johnefleming
wrote:
> BTW: If your need is to filter ALL requests, the OpenDNS will easily
> do the job and it is FREE!
>
If you tell the server to use OpenDNS, then you lose the granularity of
control via access rules.
It's a nice option, but it's really only suitable for those who don't
know much about computers. In a school environment, kids with too much
time on their hands realize they can nslookup the host's address from
some other DNS server (perhaps at home), and then use the IP address
instead of the name to bypass a DNS lookup.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to
http://www.craigjconsulting.com ***