Shouldn't the administrator have the option to decide how trustworthy the DNS service is? There are certainly no shortage of shoddy DNS services out there but not all. Making the Cfengine do some checking such as PTR records might be compromise.
-- Neil Watson Linux/UNIX Consultant http://watson-wilson.ca _______________________________________________ Help-cfengine mailing list Help-cfengine@cfengine.org https://cfengine.org/mailman/listinfo/help-cfengine
