Re: [DNSOP] Localhost entries in zones

[[e-mail]]

 still do... both 

	localhost.
	1.0.0.127.in-addr.arpa.
	::1.ip6.arpa. #

# yeah yeah... shoot me

--bill




On Thu, Apr 03, 2008 at 10:48:45AM -0400, Edward Lewis wrote:
> At 12:19 +0200 4/3/08, Antoin Verschuren wrote:
> >Hi,
> >
> >I may have missed this, but I'd like to hear the lists opinion about
> >this article:
> >http://seclists.org/bugtraq/2008/Jan/0270.html
> >that states that localhost entries in zones should be discouraged.
> 
> My problem with that doc is it says "uh, don't operate DNS servers if 
> you make mistakes."  Well, I am referring to the problem of 
> "localhost A 127.0.0.1" not having the trailing (FQDN) dot which 
> opens the doors to problems.
> 
> Here are two rules to combat this:
> 
> 1) Okay, no one forget the dot, OK?
> 2) Unless. you. put. dots. after. every. word. for. a. week., you. 
> are. prevented. from. ever. typing. named. .
> 
> >I know that localhost entries were encouraged in RFC 1537 but that one
> >is obsolted by RFC 1912 which doesn't say anything anymore about
> >localhost entries, so no encouragement nor disencouragement.
> >I think that if localhost entries in zones should be discouraged, it
> >should come from the consensus of this WG.
> 
> OTOH, I have in the past been religious about including 
> localhost(dot) in both the forward and reverse zones of my servers. 
> But I don't go to church anymore.  I forget why I dropped the 
> practice, I mean putting in the localhost(dot), not the church thing, 
> but I know I wasn't happy with it.
> 
> Thinking, thFrom [e-mail]  Thu Apr  3 13:49:02 2008
Return-Path: <[e-mail]>
X-Original-To: [e-mail]
Delivered-To: [e-mail]
Received: from core3.amsl.com (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 75F0528C3DE;
	Thu,  3 Apr 2008 13:49:02 -0700 (PDT)
X-Original-To: [e-mail]
Delivered-To: [e-mail]
Received: from localhost (localhost [127.0.0.1])
	by core3.amsl.com (Postfix) with ESMTP id 6961B28C371
	for <[e-mail]>; Thu,  3 Apr 2008 13:49:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5
	tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([64.170.98.32])
	by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id Uy+A1WswHbxz for <[e-mail]>;
	Thu,  3 Apr 2008 13:49:00 -0700 (PDT)
Received: from vacation.karoshi.com (unknown
	[IPv6:2002:c620:68b:0:230:48ff:fe11:220a])
	by core3.amsl.com (Postfix) with ESMTP id 4777128C370
	for <[e-mail]>; Thu,  3 Apr 2008 13:48:58 -0700 (PDT)
Received: from karoshi.com (localhost.localdomain [127.0.0.1])
	by vacation.karoshi.com (8.12.8/8.12.8) with ESMTP id m33KlZqM002607;
	Thu, 3 Apr 2008 20:47:35 GMT
Received: (from bmanning@localhost)
	by karoshi.com (8.12.8/8.12.8/Submit) id m33KlTku002606;
	Thu, 3 Apr 2008 20:47:29 GMT
Date: Thu, 3 Apr 2008 20:47:29 +0000
From: [e-mail]
To: Edward Lewis <[e-mail]>
Message-ID: <[e-mail].>
References: <[e-mail]>
	<a06240803c41a9d2e8268@[0.0.0.0]>
Mime-Version: 1.0
Content-Disposition: inline
In-Reply-To: <a06240803c41a9d2e8268@[0.0.0.0]>
User-Agent: Mutt/1.4.1i
Cc: [e-mail]
Subject: Re: [DNSOP] Localhost entries in zones
X-BeenThere: [e-mail]
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/dnsop>,
	<mailto:[e-mail]?subject=unsubscribe>
List-Archive: <http://www.ietf.org/pipermail/dnsop>
List-Post: <mailto:[e-mail]>
List-Help: <mailto:[e-mail]?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>,
	<mailto:[e-mail]?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: [e-mail]
Errors-To: [e-mail]

 still do... both 

	localhost.
	1.0.0.127.in-addr.arpa.
	::1.ip6.arpa. #

# yeah yeah... shoot me

--bill




On Thu, Apr 03, 2008 at 10:48:45AM -0400, Edward Lewis wrote:
> At 12:19 +0200 4/3/08, Antoin Verschuren wrote:
> >Hi,
> >
> >I may have missed this, but I'd like to hear the lists opinion about
> >this article:
> >http://seclists.org/bugtraq/2008/Jan/0270.html
> >that states that localhost entries in zones should be discouraged.
> 
> My problem with that doc is it says "uh, don't operate DNS servers if 
> you make mistakes."  Well, I am referring to the problem of 
> "localhost A 127.0.0.1" not having the trailing (FQDN) dot which 
> opens the doors to problems.
> 
> Here are two rules to combat this:
> 
> 1) Okay, no one forget the dot, OK?
> 2) Unless. you. put. dots. after. every. word. for. a. week., you. 
> are. prevented. from. ever. typing. named. .
> 
> >I know that localhost entries were encouraged in RFC 1537 but that one
> >is obsolted by RFC 1912 which doesn't say anything anymore about
> >localhost entries, so no encouragement nor disencouragement.
> >I think that if localhost entries in zones should be discouraged, it
> >should come from the consensus of this WG.
> 
> OTOH, I have in the past been religious about including 
> localhost(dot) in both the forward and reverse zones of my servers. 
> But I don't go to church anymore.  I forget why I dropped the 
> practice, I mean putting in the localhost(dot), not the church thing, 
> but I know I wasn't happy with it.
> 
> Thinking, inking, no, can't recall the reason now.  Maybe with time 
> and discussion I will.
> -- 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Edward Lewis                                                [phone]
> NeuStar
> 
> Never confuse activity with progress.  Activity pays more.
> _______________________________________________
> DNSOP mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/dnsop
_______________________________________________
DNSOP mailing list
[e-mail]
https://www.ietf.org/mailman/listinfo/dnsop


thinking, no, can't recall the reason now.  Maybe with time 
> and discussion I will.
> -- 
> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
> Edward Lewis                                                [phone]
> NeuStar
> 
> Never confuse activity with progress.  Activity pays more.
> _______________________________________________
> DNSOP mailing list
> [e-mail]
> https://www.ietf.org/mailman/listinfo/dnsop
_______________________________________________
DNSOP mailing list
[e-mail]
https://www.ietf.org/mailman/listinfo/dnsop