Re: wildcard domain serving

Colm MacCárthaigh <[email protected]> Mon, 12 Apr 2010 21:41:02 -0700
Newsgroups gmane.network.djbdns
Message-ID <[email protected]>
On Mon, Apr 12, 2010 at 8:40 PM, Jeremy Kister
<[email protected]> wrote:
> today I started experimenting with answering these queries with wildcard
> data, and came up with:
>
>  for tld in com net org ; do
>  Z$tld:a.ns.example.com.:hostmaster.example.com
>  &$tld::a.ns.example.com:86400
>  &$tld::b.ns.example.com:86400
>  +*.$tld:10.0.0.1:3600
>  @*.$tld::.:0:3600
>  '*.$tld:v=spf1 -all:3600
>  done >> data

Isn't there a risk that this data could make its way into additional
sections you serve?

E.g. if a "legitimate" domain you host has a CNAME, MX, SRV .. etc, to
something in com, net, org, then won't tinydns include glue claiming
a.ns.example.com , b.ns.example.com as the authority for .com, .net.
.org ? (if you do not also host the subdomain to which the
CNAME/whatever points).

-- 
Colm