[dns-operations] Best Practices in DNS security

[Netfortius]

Thank you for your comments - very good points - just one clarification: 

On Thursday 16 March 2006 13:58, Paul Vixie wrote:
<snip>
> 2. your recursive service really can't be externally-reachable, no matter
                                                  ^^^^
> whether you run it in the same server image as your authority service, or
> not.

I am assuming you meant "shall not", instead of "can't" ?!?

Stefan