Re: [DNSOP] Extended CNAME (ENAME)

Masataka Ohta <mohta@necom830.hpcl.titech.ac.jp> Fri, 23 May 2014 05:25 UTC

Return-Path: <mohta@necom830.hpcl.titech.ac.jp>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6AB031A0376 for <dnsop@ietfa.amsl.com>; Thu, 22 May 2014 22:25:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.042
X-Spam-Level:
X-Spam-Status: No, score=-0.042 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HELO_EQ_JP=1.244, HOST_EQ_JP=1.265, RP_MATCHES_RCVD=-0.651] autolearn=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pcdjIk5cLhgz for <dnsop@ietfa.amsl.com>; Thu, 22 May 2014 22:25:28 -0700 (PDT)
Received: from necom830.hpcl.titech.ac.jp (necom830.hpcl.titech.ac.jp [131.112.32.132]) by ietfa.amsl.com (Postfix) with SMTP id C1ACE1A036E for <dnsop@ietf.org>; Thu, 22 May 2014 22:25:27 -0700 (PDT)
Received: (qmail 37915 invoked from network); 23 May 2014 05:17:16 -0000
Received: from necom830.hpcl.titech.ac.jp (HELO ?127.0.0.1?) (131.112.32.132) by necom830.hpcl.titech.ac.jp with SMTP; 23 May 2014 05:17:16 -0000
Message-ID: <537EDBC3.5090203@necom830.hpcl.titech.ac.jp>
Date: Fri, 23 May 2014 14:25:23 +0900
From: Masataka Ohta <mohta@necom830.hpcl.titech.ac.jp>
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.5.0
MIME-Version: 1.0
To: Tony Finch <dot@dotat.at>, dnsop@ietf.org
References: <20140517010406.CD30615FE072@rock.dv.isc.org> <20140518163140.GB27592@solar.andreasschulze.de> <20140518223911.308F4160674D@rock.dv.isc.org> <537C15B4.2000008@necom830.hpcl.titech.ac.jp> <20140521031102.A1CDD1632244@rock.dv.isc.org> <537C24FA.6020804@necom830.hpcl.titech.ac.jp> <alpine.LSU.2.00.1405211221580.16298@hermes-1.csi.cam.ac.uk> <537C927F.3020007@necom830.hpcl.titech.ac.jp> <alpine.LSU.2.00.1405211251150.16298@hermes-1.csi.cam.ac.uk> <537D5AB5.1090101@necom830.hpcl.titech.ac.jp> <alpine.LSU.2.00.1405221021510.16298@hermes-1.csi.cam.ac.uk>
In-Reply-To: <alpine.LSU.2.00.1405221021510.16298@hermes-1.csi.cam.ac.uk>
Content-Type: text/plain; charset="ISO-2022-JP"
Content-Transfer-Encoding: 7bit
Archived-At: http://mailarchive.ietf.org/arch/msg/dnsop/1Uz-Nkavjr2NSMs9s1yUtHu55eA
Subject: Re: [DNSOP] Extended CNAME (ENAME)
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 23 May 2014 05:25:32 -0000

Tony Finch wrote:

>> Perhaps, it is a misunderstanding of a suggestion of rfc974:
>>
>>     Note that the algorithm to delete irrelevant RRs breaks if LOCAL has
>>     a alias and the alias is listed in the MX records for REMOTE.  (E.g.
>>     REMOTE has an MX of ALIAS, where ALIAS has a CNAME of LOCAL).  This
>>     can be avoided if aliases are never used in the data section of MX
>>     RRs.
> 
> No, that's about MX pointing at CNAME,

> CNAME pointing at MX is a different problem,

There is an interesting history of confusion. See below.

> The requirement in RFC 1123 is a restatement of
> RFC 821 section 3.7 (last paragraph) and page 30 (penultimte paragraph).

At that time, there was no MX-like mechanism in domain names
and rfc819 discusess domain->address mapping only. A mail
to a domain is delivered to domain's address.

As such, rfc974 specifies:

   It is possible that the list of MXs in the response to the query will
   be empty.  This is a special case.  If the list is empty, mailers
   should treat it as if it contained one RR, an MX RR with a preference
   value of 0, and a host name of REMOTE.  (I.e., REMOTE is its only
   MX).

Thus, what rfc821 prohibits is alias->address, CNAME pointing to
A, with an obvious reason to prevent mail loops, if mail software
is not robust enough not to be able to recognize its identity
involving aliases.

With introduction of MX, what should have been prohibited is
still CNAME pointing to A, that is, MX pointing to CNAME then
to A (as rfc974 mentions), not CNAME pointing to MX (rfc1123).

					Masataka Ohta