DNS Doctoring

DNS Doctoring is a very useful tool, if your firewall supports it.  It does pretty much what the title says, it "doctors" the responses of DNS.  I use it alot in my existing infrastructure using my Cisco ASA firewalls.  Recently, we are migrating away from Cisco ASA, and I needed to know how to preform DNS Doctoring on Juniper SRX's.  Google to the rescue. While Juniper does an 'ok' job documenting this, in my searches, I ran across this blog post from Bart Jansens, where he gave his opinions about DNS Doctoring on a Juniper SRX.  The author made this comment, which I do not necessarily agr...