Wildcarding top level zones

Matt Shields <[email protected]> Thu, 10 Jun 2010 08:34:33 -0400
Newsgroups gmane.network.djbdns
Message-ID <[email protected]>
I'm not sure if my message got through the mail list so I'm posting again.

On a previous thread I noticed someone else trying to wildcard all of .com,
.net and .org because people had their domains pointed to his server.  I
have the same issue and I was able to get this to work by adding the
following 3 zones.

Zcom:ns1.mydomain.com.:hostmaster.mydomain.com
&com::ns1.mydomain.com:86400
&com::ns2.mydomain.com:86400
+*.com:1.1.1.1:3600
@*.com::.:0:3600
'*.com:v=spf1 -all:3600

Znet:ns1.mydomain.com.:hostmaster.mydomain.com
&net::ns1.mydomain.com:86400
&net::ns2.mydomain.com:86400
+*.net:1.1.1.1:3600
@*.net::.:0:3600
'*.net:v=spf1 -all:3600

Zorg:ns1.mydomain.com.:hostmaster.mydomain.com
&org::ns1.mydomain.com:86400
&org::ns2.mydomain.com:86400
+*.org:1.1.1.1:3600
@*.org::.:0:3600
'*.org:v=spf1 -all:3600


The question I have is, when I do a dig (see below) in the AUTHORITY SECTION
it says com, net or org instead of the fqdn I'm querying, will this cause
problems?  Will applications trust the dns lookup if the authority just says
com, net or org?

[root@aquarium root]# dig @127.0.0.1 whatever.com

; <<>> DiG 9.3.4-P1 <<>> @127.0.0.1 whatever.com
; (1 server found)
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9855
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;whatever.com.            IN    A

;; ANSWER SECTION:
whatever.com.        3600    IN    A    1.1.1.1

;; AUTHORITY SECTION:
com.            86400    IN    NS    ns1.mydomain.com.
com.            86400    IN    NS    ns2.mydomain.com.

;; ADDITIONAL SECTION:
ns1.mydomain.com.    86400    IN    A    127.0.0.1
ns2.mydomain.com.    86400    IN    A    127.0.0.1

;; Query time: 1 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Jun  7 12:51:07 2010
;; MSG SIZE  rcvd: 124

-matt