> Q) Is using RFC1597 addresses a good idea if I have the possibility?
> Yes. A) They're not routable from the internet adding a bit of
> silly security, B) it conserves global routes (save the whales!) and
> C) it generally allows one to design a more intelligent, concise
> plan than to hodge podge /24 networks together.
If you are planning to use a firewall between your internal networks and the
Internet, then this makes extremely good sense. An application firewall will
readdress the packets on the way through anyway.
On a related topic, especially since DNS is the topic of late: is there a
standard which says that one is not supposed to advertise RFC1597 addresses
in one's Internet accessible DNS lists? After all, resolving the name won't
provide an address which will go to the remote destination; if anything, you
might end up going to a system on your internal network....
ex: twiddle IN A 192.168.10.2
Manager, Technical Support
Damark International, Inc