Until I added that my host could send to any host with a source port of 53, soa and zone transfers failed. Of course any further feedback is welcome. There's been amazingly little outcry from private sector companies that produce the existing products on the market, and I don't understand it. Computer security is a pretty broad field these days. I hope I didn't leave the impression I did either.
Some people do though represent themselves as more knowledgible than they are.
There's no better way for an expert to turn dumb than to stop learning. Actually that's my point. All my favorite real experts are constantly amazed by how much there is to learn and none of them seems to consider themselves real experts in a very broad sense of the term. I would still like to have it accept them from the inside net. I'm not sure that you really mean 'console connect requests,' but rather vty connections from unwanted networks, if I interpret you message correctly.