From: adam@address.invalid   
      
   David W. Hodgins wrote:   
   > On Mon, 28 Jan 2013 00:56:00 -0500, Adam  wrote:   
   >   
   >> Understandably, my router (supplied by my ISP) is set to use two of my   
   >> ISP's DNS.   
      
   And I don't think /I/ can change those, just my ISP (remotely).   
      
   >> Would explicitly specifying some other DNS (Google, OpenDNS,   
   >> etc.) somewhere in /etc be an adequate stopgap until I get 'bind' set up   
   >> on a system?  I obviously need some sort of DNS just to get the 'bind'   
   >> software from the repository.   
   >   
   > You're isp's dns servers should be fine, provided they are specified in   
   > the system's configuration, and not being taken from the dhcp server in   
   > the router.   
      
   Good.  I've been explicitly specifying them in the config files.   
      
   > I suggest changing the router's ip address, so that networking will fail   
   > completely, if the router gets hacked, but not if it's a system that   
   > you normally use ssh to access.   
      
   My router's 192.168.1.13 locally; its WAN IP is dynamic (and sometimes   
   spontaneously changes).  I don't even have ssh configured yet, and don't   
   really expect to use it except within my LAN.   
      
   > As long as the computer is not using the dns server ip addresses from the   
   > router, or relying on it to provide firewall protection (i.e. either   
   > hard code the dns ip addresses, or run bind, and shorewall, etc), it   
   > doesn't really matter if the router gets hacked.   
      
   Okay, so it sounds like my router is pretty much configured, except for   
   possibly changing the address range it can assign with DHCP.  Thanks   
   again for your advice!   
      
   Adam   
   --   
   Registered Linux User #536473   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)