[HLUG] Herefordshire Digest, Vol 2091, Issue 1

[Kevin Dontenville]

I would probably look at NS server, largely just a forwarder, with local resolution as needed for an internal domain/hosts. Often very useful to have NS locally to help out with any complex NAT to internal services IP issues too. Or outside that maybe use a socks proxy for all requests from the VPN using the LAN NS for fetches. Gives you some protection and logging too. 

K