Re: [nznog] Web Servers: Dual-homing or DNAT/Port Forwarding?

On Dec 10, 2013, at 2:33 PM, Jim Cheetham wrote:

router ACLs are 'faster' but have fewer tools to help you maintain them)

Actually, all you need to maintain ACLs is good old RCS and RANCID. ;>

Of course, no-one filters the outbound traffic from their servers, do they? :-(

Which one ought to do, with stateless ACLs. ;> ----------------------------------------------------------------------- Roland Dobbins // http://www.arbornetworks.com Luck is the residue of opportunity and design. -- John Milton