Re: wildcard domain serving
Colm MacCárthaigh <[email protected]> Mon, 12 Apr 2010 21:41:02 -0700
| Newsgroups | gmane.network.djbdns |
|---|---|
| Message-ID | <[email protected]> |
On Mon, Apr 12, 2010 at 8:40 PM, Jeremy Kister <[email protected]> wrote: > today I started experimenting with answering these queries with wildcard > data, and came up with: > > for tld in com net org ; do > Z$tld:a.ns.example.com.:hostmaster.example.com > &$tld::a.ns.example.com:86400 > &$tld::b.ns.example.com:86400 > +*.$tld:10.0.0.1:3600 > @*.$tld::.:0:3600 > '*.$tld:v=spf1 -all:3600 > done >> data Isn't there a risk that this data could make its way into additional sections you serve? E.g. if a "legitimate" domain you host has a CNAME, MX, SRV .. etc, to something in com, net, org, then won't tinydns include glue claiming a.ns.example.com , b.ns.example.com as the authority for .com, .net. .org ? (if you do not also host the subdomain to which the CNAME/whatever points). -- Colm