> > Keith Moore wrote: > > great. now we'll have NAT boxes intercepting > > outgoing DNS traffic also. > > That was not my point. My point was to have a DNS server in the inside > configured for reverse lookup of private IPs. one of the most-frequently cited justifications for NAT is plug-and-play. expecting people to set up their own DNS servers sort of nullifies that.