Re: [DNSOP] Localhost entries in zones

At 12:19 +0200 4/3/08, Antoin Verschuren wrote:
>Hi,
>
>I may have missed this, but I'd like to hear the lists opinion about
>this article:
>http://seclists.org/bugtraq/2008/Jan/0270.html
>that states that localhost entries in zones should be discouraged.

My problem with that doc is it says "uh, don't operate DNS servers if 
you make mistakes."  Well, I am referring to the problem of 
"localhost A 127.0.0.1" not having the trailing (FQDN) dot which 
opens the doors to problems.

Here are two rules to combat this:

1) Okay, no one forget the dot, OK?
2) Unless. you. put. dots. after. every. word. for. a. week., you. 
are. prevented. from. ever. typing. named. .

>I know that localhost entries were encouraged in RFC 1537 but that one
>is obsolted by RFC 1912 which doesn't say anything anymore about
>localhost entries, so no encouragement nor disencouragement.
>I think that if localhost entries in zones should be discouraged, it
>should come from the consensus of this WG.

OTOH, I have in the past been religious about including 
localhost(dot) in both the forward and reverse zones of my servers. 
But I don't go to church anymore.  I forget why I dropped the 
practice, I mean putting in the localhost(dot), not the church thing, 
but I know I wasn't happy with it.

Thinking, thinking, no, can't recall the reason now.  Maybe with time 
and discussion I will.
-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Edward Lewis                                                +1-571-434-5468
NeuStar

Never confuse activity with progress.  Activity pays more.
_______________________________________________
DNSOP mailing list
DNSOP@ietf.org
https://www.ietf.org/mailman/listinfo/dnsop