[members-discuss] New (silent) reverse dns checks

Hi,

On Sat, Jun 08, 2019 at 04:14:57PM +0000, Job Snijders wrote:
> On Fri, Jun 07, 2019 at 06:53:37PM +0000, Torbjörn Eklöv wrote:
> > > On 7 Jun 2019, at 20:39, Måns Nilsson <mans.axel.nilsson at svt.se> wrote:
> > > 
> > > And, open resolvers have no place on authoritative servers. Full stop.
> > 
> > +100 Måns!
> 
> This is all great and I agree. However, it is not RIPE NCC's place to
> dictate what one does on one's servers/services. Unless RIPE NCC has a
> financial stake in the operation, I'd prefer it if they don't make any
> evaluations and just do as instructed.

Well, I assume they *do* as instructed: do checks on the sanity of the
request, as per consensus in the DNS WG.  Which is the place to discuss
whether to change said consensus.

I, for one, am a great fan of having as strict DNS checks as possible -
because for everyone who can convincingly explain to me that *he* is
the big exception and this really is not something he wants to have,
I see 1000 broken DNS setups where having whatever checks in place is
a very good thing.

(I maintain our DNS infrastructure, so I see a lot of "interesting"
approaches to DNS...)

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                      Vorstand: Sebastian v. Bomhard, Michael Emmer
Joseph-Dollinger-Bogen 14        Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                 HRB: 136055 (AG Muenchen)
Tel: +49 (0)89/32356-444         USt-IdNr.: DE813185279
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <https://www.ripe.net/ripe/mail/archives/members-discuss/attachments/20190609/4ef7ddd6/attachment.sig>