From: dwhodgins@nomail.afraid.org   
      
   On Mon, 28 Jan 2013 00:56:00 -0500, Adam  wrote:   
      
   > Thanks for your suggestions, Dave, which I've already implemented.   
   > Understandably, my router (supplied by my ISP) is set to use two of my   
   > ISP's DNS.  Would explicitly specifying some other DNS (Google, OpenDNS,   
   > etc.) somewhere in /etc be an adequate stopgap until I get 'bind' set up   
   > on a system?  I obviously need some sort of DNS just to get the 'bind'   
   > software from the repository.   
      
   You're isp's dns servers should be fine, provided they are specified in   
   the system's configuration, and not being taken from the dhcp server in   
   the router.   
      
   I suggest changing the router's ip address, so that networking will fail   
   completely, if the router gets hacked, but not if it's a system that   
   you normally use ssh to access.   
      
   As long as the computer is not using the dns server ip addresses from the   
   router, or relying on it to provide firewall protection (i.e. either   
   hard code the dns ip addresses, or run bind, and shorewall, etc), it   
   doesn't really matter if the router gets hacked.   
      
   Regards, Dave Hodgins   
      
   --   
   Change nomail.afraid.org to ody.ca to reply by email.   
   (nomail.afraid.org has been set up specifically for   
   use in usenet. Feel free to use it yourself.)   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)