Re: [DNSOP] RFC2317 Question: Resolving cname delegation

P Vix <paul@redbarn.org> Thu, 24 August 2017 17:07 UTC

Return-Path: <paul@redbarn.org>
X-Original-To: dnsop@ietfa.amsl.com
Delivered-To: dnsop@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB2E413234B for <dnsop@ietfa.amsl.com>; Thu, 24 Aug 2017 10:07:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.9
X-Spam-Level:
X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WL6u59unX34U for <dnsop@ietfa.amsl.com>; Thu, 24 Aug 2017 10:07:23 -0700 (PDT)
Received: from family.redbarn.org (family.redbarn.org [24.104.150.213]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 348A61321C9 for <dnsop@ietf.org>; Thu, 24 Aug 2017 10:07:23 -0700 (PDT)
Received: from [IPv6:2600:100e:b140:3a6d:deb4:f2b4:97d9:ea8b] (unknown [IPv6:2600:100e:b140:3a6d:deb4:f2b4:97d9:ea8b]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by family.redbarn.org (Postfix) with ESMTPSA id 1722861FF3; Thu, 24 Aug 2017 17:07:20 +0000 (UTC)
Date: Thu, 24 Aug 2017 17:07:18 +0000
User-Agent: K-9 Mail for Android
In-Reply-To: <599EF4F2.6070509@isdg.net>
References: <599EF4F2.6070509@isdg.net>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----F5MZ9ICR9XWF3QWMTKTQRMIEDF9BLW"
Content-Transfer-Encoding: 7bit
To: dnsop@ietf.org, Hector Santos <hsantos@isdg.net>, "dnsop@ietf.org" <dnsop@ietf.org>
From: P Vix <paul@redbarn.org>
Message-ID: <151DA7A7-47A7-4353-8A0A-A3EAB9B3EA46@redbarn.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/dnsop/MW1u2MPk4NL7yDJO_TONb7IvMQ4>
Subject: Re: [DNSOP] RFC2317 Question: Resolving cname delegation
X-BeenThere: dnsop@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: IETF DNSOP WG mailing list <dnsop.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsop>, <mailto:dnsop-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/dnsop/>
List-Post: <mailto:dnsop@ietf.org>
List-Help: <mailto:dnsop-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsop>, <mailto:dnsop-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 24 Aug 2017 17:07:26 -0000

This is why rfc 2308 definition of qname is correct.

On August 24, 2017 9:46:58 AM MDT, Hector Santos <hsantos@isdg.net> wrote:
>I have a question related to RFC2317 "Classless IN-ADDR.ARPA
>delegation."
>
>Earlier this year, I switched from a class C bank of 256 addresses to 
>a reduced  set of 32 ips (/27).  To get PTR queries to work, RFC2317 
>was referred by my ISP to prepare the delegation.
>
>Having implemented RFC2317, I noticed with PTR lookups directly 
>against my own DNS server, it returns the proper host names, no 
>cnames.   When the query is done against other DNS servers, it returns 
>the CNAME which points to the expected host name(s).  This I 
>understand is the expected RFC2317 method setup by the ISP.
>
>Not expecting this in my DNS resolver code, I modified the resolver to 
>take the CNAMEs into account and return the host names instead.  Was 
>this the correct thing to do, thus providing the same results 
>regardless of the query location?
>
>Reading RFC2317, section 5.1 and section 5.3, it sounds what I did was 
>ok.'
>
>I have various PTR lookup scripts that did not expect the CNAME in the 
>PTR query as RFC2317 indicates may happen, thus possibly failing a PTR 
>requirement, i.e. SMTP receiver connection, etc.
>
>Before I release my updates, I wonder if this was the right thing to
>do.
>
>Thanks
>
>-- 
>HLS
>
>
>_______________________________________________
>DNSOP mailing list
>DNSOP@ietf.org
>https://www.ietf.org/mailman/listinfo/dnsop

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.