On Thu, Aug 23, 2001 at 01:37:22PM -0400, James Sharp wrote:
> 
> That's assuming that I will never need to get to my kerberized
> zone from somewhere outside of NAT.  Yeah, I could set up IPSec and IPF
> and some VLANs and some tunnels and maybe some external to
> internal gateway machine....but, no.

Personally I like to have two interfaces in my public machines so I can
separate inside & outside traffic.  If you put an inexpensive card on the
outside, you wouldn't have this issue at all. :)

-Andrew