[members-discuss] New (silent) reverse dns checks

Jonas Frey wrote:

> we just found out that RIPE seems to have silently integrated new
> checks for reverse delegation of zones.
> Its no longer possible to add or even change a zone if the nameservers
> used by them are open recursors. The update will fail.

Indeed? Really? Wow.

> Yes - open recursors are (sometimes) bad. But there are legitimate
> reasons to run them (freedom of speech, filtered resources etc). Once
> properly configured (i.e. querys rate limited) they wont pose a threat.

We strongly agree.

Don't blacklist open resolvers RIPE!

-- 
nemox.net
Rudolf E. Steiner
r.steiner at nemox.net
http://nemox.net/pdat/res/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: r_steiner.vcf
Type: text/x-vcard
Size: 265 bytes
Desc: not available
URL: <https://www.ripe.net/ripe/mail/archives/members-discuss/attachments/20190607/09643582/attachment.vcf>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4184 bytes
Desc: S/MIME Cryptographic Signature
URL: <https://www.ripe.net/ripe/mail/archives/members-discuss/attachments/20190607/09643582/attachment.p7s>