Re: [DNSOP] Fwd: I-D Action: draft-chapin-additional-reserved-tlds-02.txt

Tony Finch <dot@dotat.at> Tue, 03 March 2015 11:09 UTC

Return-Path: <fanf2@hermes.cam.ac.uk>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 953CE1A019B for <dnsop@ietfa.amsl.com>; Tue, 3 Mar 2015 03:09:53 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.511
X-Spam-Level:
X-Spam-Status: No, score=-1.511 tagged_above=-999 required=5 tests=[BAYES_50=0.8, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_PASS=-0.001, T_RP_MATCHES_RCVD=-0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I_FefZ5Vadhj for <dnsop@ietfa.amsl.com>; Tue, 3 Mar 2015 03:09:51 -0800 (PST)
Received: from ppsw-40.csi.cam.ac.uk (ppsw-40.csi.cam.ac.uk [131.111.8.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0EF011A0195 for <dnsop@ietf.org>; Tue, 3 Mar 2015 03:09:50 -0800 (PST)
X-Cam-AntiVirus: no malware found
X-Cam-ScannerInfo: http://www.cam.ac.uk/cs/email/scanner/
Received: from hermes-1.csi.cam.ac.uk ([131.111.8.51]:54858) by ppsw-40.csi.cam.ac.uk (smtp.hermes.cam.ac.uk [131.111.8.156]:25) with esmtpa (EXTERNAL:fanf2) id 1YSkhx-0003N1-jC (Exim 4.82_3-c0e5623) for dnsop@ietf.org (return-path <fanf2@hermes.cam.ac.uk>); Tue, 03 Mar 2015 11:09:49 +0000
Received: from fanf2 by hermes-1.csi.cam.ac.uk (hermes.cam.ac.uk) with local id 1YSkhw-0002gr-Tu (Exim 4.72) for dnsop@ietf.org (return-path <fanf2@hermes.cam.ac.uk>); Tue, 03 Mar 2015 11:09:48 +0000
Date: Tue, 03 Mar 2015 11:09:48 +0000
From: Tony Finch <dot@dotat.at>
X-X-Sender: fanf2@hermes-1.csi.cam.ac.uk
To: dnsop <dnsop@ietf.org>
In-Reply-To: <alpine.LFD.2.10.1503022129000.19140@bofh.nohats.ca>
Message-ID: <alpine.LSU.2.00.1503031046080.23307@hermes-1.csi.cam.ac.uk>
References: <20150302105857.16985.904.idtracker@ietfa.amsl.com> <54F4E124.3010406@gmail.com> <alpine.LFD.2.10.1503022129000.19140@bofh.nohats.ca>
User-Agent: Alpine 2.00 (LSU 1167 2008-08-23)
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset="US-ASCII"
Sender: Tony Finch <fanf2@hermes.cam.ac.uk>
Archived-At: <http://mailarchive.ietf.org/arch/msg/dnsop/4inLr2OqOJBfM4bsFBoa3jRcvoI>
Subject: Re: [DNSOP] Fwd: I-D Action: draft-chapin-additional-reserved-tlds-02.txt
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Mar 2015 11:09:53 -0000

Paul Wouters <paul@nohats.ca> wrote:

> On Mon, 2 Mar 2015, Tim Wicinski wrote:
>
> > Subject: [DNSOP] Fwd: I-D Action:
> > draft-chapin-additional-reserved-tlds-02.txt
>
> > To those working on the alt-tld draft and other interested parties, this
> > draft was recently revised today.  I am sure there are people on this list
> > who have strong opinions on this matter.
>
> What was the motivation for removing .lan from the list?
>
> I can see where .localdomain and .domain indeed won't cause any
> problems, but I think .lan is still a pretty common one in use.

It is a common fake TLD used by home gateways for their internal networks.

I collected a list of distinct client host names from my mail servers (MX
and message submission servers) which did not match the DNS. A lot of
these will be internal names. I counted the most popular TLDs. .lan is the
4th most popular fake TLD, after .local (mDNS), .home (BT Home Hubs) and
.localdomain (trad.).

 135 internal
 137 cn
 143 ch
 146 lan
 155 hu
 163 pt
 164 za
 169 localdomain
 178 tw
 188 ua
 197 uy
 205 ca
 218 eu
 245 gr
 253 ar
 279 nl
 281 cl
 297 au
 300 es
 312 jp
 356 fr
 525 edu
 569 home
 768 pl
 796 local
 819 ru
 923 it
1071 de
1099 org
1408 br
1707 info
1814 biz
2823 uk
3582 net
3729 in
11019 com

If I only look at my MXs the list is quite different:

 107 internal
 107 se
 124 id
 124 th
 134 cz
 137 cn
 143 ch
 155 hu
 158 localdomain
 163 pt
 164 za
 178 tw
 188 ua
 197 uy
 205 ca
 218 eu
 245 gr
 253 ar
 278 nl
 281 cl
 297 au
 300 es
 312 jp
 351 fr
 480 local
 511 edu
 768 pl
 819 ru
 916 it
1071 de
1075 org
1408 br
1707 info
1814 biz
2080 uk
3569 net
3729 in
10982 com

(It seems spammers have learned not to use home gateway fake TLDs...)

For message submission I see the following:

   4 root
   4 sg
   6 fr
   6 site
   8 box
   8 it
   9 localdomain
  11 net
  14 edu
  14 localnet
  16 org
  27 internal
  44 com
 125 lan
 306 local
 382 uk
 495 home

Tony.
-- 
f.anthony.n.finch  <dot@dotat.at>  http://dotat.at/
Portland, Plymouth, North Biscay: Westerly veering northwesterly 5 to 7.
Moderate or rough in Portland and northeast Plymouth, otherwise rough or very
rough. Squally showers. Good, occasionally poor.