[76139] in North American Network Operators' Group
Re: is reverse dns required? (policy question)
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Thu Dec 2 12:09:22 2004
To: Andre Oppermann <nanog-list@nrg4u.com>
Cc: Steven Champeon <schampeo@hesketh.com>, nanog@merit.edu
In-Reply-To: Your message of "Thu, 02 Dec 2004 16:03:55 +0100."
<41AF2EDB.7000503@nrg4u.com>
From: Valdis.Kletnieks@vt.edu
Date: Thu, 02 Dec 2004 12:08:42 -0500
Errors-To: owner-nanog-outgoing@merit.edu
--==_Exmh_2038437156P
Content-Type: text/plain; charset=us-ascii
On Thu, 02 Dec 2004 16:03:55 +0100, Andre Oppermann said:
> Reverse zone file for 10.0.0.0/24:
>
> 1.0.0.10.in-addr.arpa. IN PTR mail.example.com.
>
> _send._smtp._srv.1.0.0.10.in-addr.arpa. IN TXT "1"
> ftp://ftp.rfc-editor.org/in-notes/internet-drafts/draft-stumpf-dns-mtamark-03.txt
The problem with that is that for *Steven* to benefit from it, *I'd* have to
get the appropriate people here to stick in the appropriate stuff in the
in-addr.arpa zones for 128.173/16 and 198.82/16. In other words, it suffers
from the same deployment problem as SPF records. (Actually, locally, it's
harder to deploy because SPF needs one TXT at the top of the zone, which is
mostly static and amenable to hand-editing - those __srv records on the other
hand are down in zones that are automagically written by software which then
needs to be modified to support splatting out the additional TXT record each
time...)
In other news, we discovered that when we published our SPF record, it managed
to push the DNS response over 512 bytes, as we already had several TXT records
and 5 NS/A records got returned as well - and we got bit by the usual places
that don't do TCP/53 or EDNS0. Anybody else hit that one accidentally? (We
ended up jettisoning several TXT's and got it down to 410, so no problem now).
--==_Exmh_2038437156P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iD8DBQFBr0wacC3lWbTT17ARAqG/AKD4JDNJMqiDZAszDRob8qlgthV9VgCfQlpO
c32CrIEzOpSJL+cSUY7AP0E=
=a0g6
-----END PGP SIGNATURE-----
--==_Exmh_2038437156P--
