Hey Greg, Sure it does. That's why my ISA firewall is the DNS server is on the ISA firewall. Pretty unlikely that someone is going to plant an X over DNS proxy on my ISA firewall, and if they do have the abilty to do that, then I've got even bigger problems! Tom Thomas W Shinder, M.D. Site: www.isaserver.org <http://www.isaserver.org/> Blog: http://spaces.msn.com/members/drisa/ Book: http://tinyurl.com/3xqb7 <http://tinyurl.com/3xqb7> MVP -- ISA Firewalls **Who is John Galt?** ________________________________ From: Greg Mulholland [mailto:greg@xxxxxxxxxxxxxx] Sent: Thursday, December 01, 2005 7:26 PM To: [ISAserver.org Discussion List] Subject: [isalist] RE: FYI: GNU httptunnel http://www.ISAserver.org Hey Tom... i also dont lik people tunneling IP over DNS on my network, so i have blocked all access to DNS :) works well :) Greg Mulholland ________________________________ From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Friday, December 02, 2005 3:33 AM To: [ISAserver.org Discussion List] Subject: [isalist] FYI: GNU httptunnel http://www.ISAserver.org Check out this sweetheart: GNU httptunnel: http://www.nocrew.org/software/httptunnel.html And write to every MS representative you know about how important it is to have outbound SSL to SSL bridging in the next version (or some upcoming version) of the ISA firewall. This is a tremendous network security threat and we don't want the ISA firewall to get behind the 8-ball on this one. laterz, Tom ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: greg@xxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx