IETF Logo Mail Archive

Re: [dnsext] Short introduction to zone cuts?

Ray Bellis <Ray.Bellis@nominet.org.uk> Mon, 19 March 2012 14:58 UTC

Return-Path: <dnsext-bounces@ietf.org>
X-Original-To: namedroppers-archive-gleetwall6@lists.ietf.org
Delivered-To: ietfarch-namedroppers-archive-gleetwall6@ietfa.amsl.com
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A064121F8857; Mon, 19 Mar 2012 07:58:25 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1332169105; bh=HXT87bTJA0TA3eSSXYHQLnhx7WG7UBnPBvc+lyXRdOE=; h=From:To:Date:Message-ID:References:In-Reply-To:Content-ID: MIME-Version:Cc:Subject:List-Id:List-Unsubscribe:List-Archive: List-Post:List-Help:List-Subscribe:Content-Type: Content-Transfer-Encoding:Sender; b=QOXb67QnKw01la16WNDzELPDa/SEQInifECJY+AwcTP44EzFWZ0S240jpVCWsZpOe W8h+yZBA/ObN/4L0ygT+kP/odATuOB25Y3VvROYNV9ioi8z8jeWo8pDELUt+FvvOtz R1iV98KBnJvmcM3XbbdlUWYUwEiSPMb4le7jc6tE=
X-Original-To: dnsext@ietfa.amsl.com
Delivered-To: dnsext@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E4DFE21F8844 for <dnsext@ietfa.amsl.com>; Mon, 19 Mar 2012 07:58:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.303
X-Spam-Level:
X-Spam-Status: No, score=-10.303 tagged_above=-999 required=5 tests=[AWL=0.296, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xcHmV9R96mbN for <dnsext@ietfa.amsl.com>; Mon, 19 Mar 2012 07:58:23 -0700 (PDT)
Received: from mx4.nominet.org.uk (mx4.nominet.org.uk [213.248.199.24]) by ietfa.amsl.com (Postfix) with ESMTP id D06E021F87A0 for <dnsext@ietf.org>; Mon, 19 Mar 2012 07:58:21 -0700 (PDT)
DomainKey-Signature: s=main.dk.nominet.selector; d=nominet.org.uk; c=nofws; q=dns; h=X-IronPort-AV:Received:Received:From:To:CC:Subject: Thread-Topic:Thread-Index:Date:Message-ID:References: In-Reply-To:Accept-Language:Content-Language: X-MS-Has-Attach:X-MS-TNEF-Correlator:Content-Type: Content-ID:Content-Transfer-Encoding:MIME-Version; b=uiFgnPNOgSF2j2vZmxo9y4jlhj2kmIUpmyGPJXGxYIEiE8Mgu/UkwL51 5ulvaHDu4V2iXu4e1IIU33XjQMxBXCAY0xwO6/cKaFfo/shUr1tx47Mvy MC2QMP0mCuQoe3p;
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=nominet.org.uk; i=Ray.Bellis@nominet.org.uk; q=dns/txt; s=main.dkim.nominet.selector; t=1332169103; x=1363705103; h=from:sender:reply-to:subject:date:message-id:to:cc: mime-version:content-transfer-encoding:content-id: content-description:resent-date:resent-from:resent-sender: resent-to:resent-cc:resent-message-id:in-reply-to: references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:list-owner:list-archive; z=From:=20Ray=20Bellis=20<Ray.Bellis@nominet.org.uk> |Subject:=20Re:=20[dnsext]=20Short=20introduction=20to=20 zone=20cuts?|Date:=20Mon,=2019=20Mar=202012=2014:58:19=20 +0000|Message-ID:=20<B9ADF3A0-5943-4FFF-A614-5727D34AD6F6 @nominet.org.uk>|To:=20Doug=20Barton=20<dougb@dougbarton. us>|CC:=20Mark=20Andrews=20<marka@isc.org>,=20Paul=20Hoff man=20<paul.hoffman@vpnc.org>,=20DNSEXT=0D=0A=20Working =20Group=20<dnsext@ietf.org>|MIME-Version:=201.0 |Content-Transfer-Encoding:=20quoted-printable |Content-ID:=20<19cde0a1-3f7b-48a0-a400-ef478ffc4de1> |In-Reply-To:=20<4F653C29.2070103@dougbarton.us> |References:=20<946E9EC4-9872-4A98-BCEB-3CD7420929A1@vpnc .org>=0D=0A=20<20120316233618.16C831E9F8E3@drugs.dv.isc.o rg>=0D=0A=20<8D53F412-A917-4DB2-9B7F-527B8FDD6779@nominet .org.uk>=0D=0A=20<4F653C29.2070103@dougbarton.us>; bh=Sbe4jmZwm5yj1+IQTMs+2/e7JbwKE7wE3VrK52fgMT0=; b=xEwRphvkDmBstn+oHR2Ozyoo7A++a5DpD4DXu2AJgQxv9sM55qBc+gW7 ZZz/ZZX49XS+W91a2rgLacsEKMDN0pVuivkIFPrdykEelU3lzW0/084V7 9xy+Ug9QzBFiHpi;
X-IronPort-AV: E=Sophos;i="4.73,612,1325462400"; d="scan'208";a="32068607"
Received: from wds-exc1.okna.nominet.org.uk ([213.248.197.144]) by mx4.nominet.org.uk with ESMTP; 19 Mar 2012 14:58:20 +0000
Received: from WDS-EXC2.okna.nominet.org.uk ([fe80::7577:eaca:5241:25d4]) by wds-exc1.okna.nominet.org.uk ([fe80::1593:1394:a91f:8f5f%19]) with mapi; Mon, 19 Mar 2012 14:58:20 +0000
From: Ray Bellis <Ray.Bellis@nominet.org.uk>
To: Doug Barton <dougb@dougbarton.us>
Thread-Topic: [dnsext] Short introduction to zone cuts?
Thread-Index: AQHNA5zsYFL40qEpS0Ktdz4KXCtF9ZZtlCQkgADpMwCAAMqSgIACck6A
Date: Mon, 19 Mar 2012 14:58:19 +0000
Message-ID: <B9ADF3A0-5943-4FFF-A614-5727D34AD6F6@nominet.org.uk>
References: <946E9EC4-9872-4A98-BCEB-3CD7420929A1@vpnc.org> <20120316233618.16C831E9F8E3@drugs.dv.isc.org> <8D53F412-A917-4DB2-9B7F-527B8FDD6779@nominet.org.uk> <4F653C29.2070103@dougbarton.us>
In-Reply-To: <4F653C29.2070103@dougbarton.us>
Accept-Language: en-GB, en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-ID: <19cde0a1-3f7b-48a0-a400-ef478ffc4de1>
MIME-Version: 1.0
Cc: Paul Hoffman <paul.hoffman@vpnc.org>, DNSEXT Working Group <dnsext@ietf.org>
Subject: Re: [dnsext] Short introduction to zone cuts?
X-BeenThere: dnsext@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: DNS Extensions working group discussion list <dnsext.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dnsext>, <mailto:dnsext-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dnsext>
List-Post: <mailto:dnsext@ietf.org>
List-Help: <mailto:dnsext-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dnsext>, <mailto:dnsext-request@ietf.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: dnsext-bounces@ietf.org
Errors-To: dnsext-bounces@ietf.org

On 18 Mar 2012, at 01:36, Doug Barton wrote:

> I'm not sure what you mean by "works" here.

I mean the NAPTR records correctly resolve.

> If you mean that anyone
> using ns1.example.com directly will see those records, then yes, it
> works -- for those users. But assuming that ns1.example.com is not
> included in the NS set of the parent zone, no one else will see the 2
> NAPTR records you listed above. So in that sense it doesn't work ... at
> least, it doesn't work the way that the administrator of ns1.example.com
> wants it to.

No, in this case "ns1.example.com" _is_ found via the parent zone, but the delegation is four nodes further down the DNS tree than the child's SOA / NS records would indicate.

Ray


_______________________________________________
dnsext mailing list
dnsext@ietf.org
https://www.ietf.org/mailman/listinfo/dnsext

v2.23.0 | Report a Bug | By Email