[191246] in North American Network Operators' Group
Re: Cloudflare reverse DNS SERVFAIL, normal?
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Tue Aug 30 18:50:15 2016
X-Original-To: nanog@nanog.org
To: Owen DeLong <owen@delong.com>
From: Valdis.Kletnieks@vt.edu
In-Reply-To: <926F8B85-8864-4424-BEAA-1836B718A9FD@delong.com>
Date: Tue, 30 Aug 2016 18:50:03 -0400
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
--==_Exmh_1472597403_2037P
Content-Type: text/plain; charset=us-ascii
On Tue, 30 Aug 2016 14:39:10 -0700, Owen DeLong said:
> I run a pair of nameservers. Let’s call them ns1.company.com
> and ns2.company.com
> Someone registers example.com and points NS records in the COM zone at my
> nameservers.
I would have expected that the resulting NXDOMAIN replies from ns1 and ns2
would usually make this a self-correcting problem.
Are there actually people who do this misconfiguration on a zone big enough
for the traffic to matter, and leave it that way for very long before they
clue in that things aren't working right? I'd think that if somebody points
billy-bobs-bait-tackle-and-internet.com at you, it might take you quite some
time to notice - and if somebody whoopsies and points ebay.com's NS records
at you, the resulting disfunction would be noticed fairly soon....
(Miscreants who do this intentionally are, of course, a totally different
kettle of fish, and need to be dealt with as micreants....)
--==_Exmh_1472597403_2037P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Comment: Exmh version 2.5 07/13/2001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=+h42
-----END PGP SIGNATURE-----
--==_Exmh_1472597403_2037P--
