Best practices securing DNS (continued)


Consider creating two types of name server, each optimized for a particular function: 

Advertising name server
Advertising to the Internet
Resolving name server
Internal to the company

Separation by functionality allows separation of threats and therefore risk.