Re: Reverse address entries

2013-07-16 Thread Sam Wilson
In article , "Novosielski, Ryan" wrote: > Came across another instance where [reverse lookups] may matter: TCP Wrappers. > Although the case there was a bit more peculiar -- rr.net does not > appear to have FORWARD DNS for at least some of its dynamic address > space. So you can get a PTR, and t

Re: Reverse address entries

2013-07-12 Thread Novosielski, Ryan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/12/2013 11:23 AM, Sam Wilson wrote: > In article > , Steven > Carr wrote: > >> On 2 July 2013 14:42, Sam Wilson wrote: >>> Can anyone here give examples of the types of various software >>> that will not operate without a PTR record? >> >> Th

Re: Reverse address entries

2013-07-12 Thread Sam Wilson
In article , Daniel McDonald wrote: > On 7/2/13 8:42 AM, "Sam Wilson" wrote: > > > There may be a subtle language thing going on here. I read the original > > post above as saying, literally, "you need PTR records because various > > software tries to match A and PTR records". It doesn't say

Re: Reverse address entries

2013-07-12 Thread Sam Wilson
In article , Steven Carr wrote: > On 2 July 2013 14:42, Sam Wilson wrote: > > Can anyone here give examples of the types of various software that will > > not operate without a PTR record? > > There have already been numerous listings of software that require > reverse lookups. SMTP being the

Re: Reverse address entries

2013-07-05 Thread John Wobus
On Jun 28, 2013, at 3:54 PM, Ward, Mike S wrote: I want to thank everyone for their input. It sounds like they do need the reverse address entries in specific circumstances so I’m going to recommend that they add them. Lack of reverse records made a big difference in the distant past. Now, I

Re: Reverse address entries

2013-07-03 Thread Novosielski, Ryan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/03/2013 11:33 PM, Doug Barton wrote: > On 07/03/2013 07:52 PM, Novosielski, Ryan wrote: | On 07/03/2013 > 04:39 AM, Matus UHLAR - fantomas wrote: |> On 02.07.13 08:53, > Daniel McDonald wrote: |>> I've had trouble with OSI-Soft PI > historian wit

Re: Reverse address entries

2013-07-03 Thread Doug Barton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/03/2013 07:52 PM, Novosielski, Ryan wrote: | On 07/03/2013 04:39 AM, Matus UHLAR - fantomas wrote: |> On 02.07.13 08:53, Daniel McDonald wrote: |>> I've had trouble with OSI-Soft PI historian without reverse |>> entries. If there is no revers

Re: Reverse address entries

2013-07-03 Thread Novosielski, Ryan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/03/2013 04:39 AM, Matus UHLAR - fantomas wrote: > On 02.07.13 08:53, Daniel McDonald wrote: >> I've had trouble with OSI-Soft PI historian without reverse >> entries. If there is no reverse, then the PI software would >> spend about 30 seconds l

Re: Reverse address entries

2013-07-03 Thread Matus UHLAR - fantomas
On 02.07.13 08:53, Daniel McDonald wrote: I've had trouble with OSI-Soft PI historian without reverse entries. If there is no reverse, then the PI software would spend about 30 seconds looking in vain for a DNS answer before sending a SYN-ACK packet. If there is no reverse, the software shoul

Re: Reverse address entries

2013-07-02 Thread Eduardo Bonsi
On 7/2/13 12:46 PM, John Horne wrote: On Tue, 2013-07-02 at 12:02 -0700, Eduardo Bonsi wrote: On 7/2/13 9:35 AM, John Horne wrote: We were alerted to the problem because we got long delays (around 20 seconds) when accessing a site doing a reverse lookup. That service then, no doubt the same as

Re: Reverse address entries

2013-07-02 Thread Sten Carlsen
On 02/07/13 21:02, Eduardo Bonsi wrote: > I have been reading all your concerns about reverse FQDNS. In my > example, we are a very small firm and I am the IT network admin > responsible for configuring our server. One of the reasons I > configured our server was because we deal with Photography,

Re: Reverse address entries

2013-07-02 Thread John Horne
On Tue, 2013-07-02 at 12:02 -0700, Eduardo Bonsi wrote: > On 7/2/13 9:35 AM, John Horne wrote: > > > > We were alerted to the problem because we got long delays (around 20 > > seconds) when accessing a site doing a reverse lookup. That service > > then, no doubt the same as with SMTP, then proceede

Re: Reverse address entries

2013-07-02 Thread Eduardo Bonsi
On 7/2/13 9:35 AM, John Horne wrote: On Tue, 2013-07-02 at 14:42 +0100, Sam Wilson wrote: Can anyone here give examples of the types of various software that will not operate without a PTR record? Nope, and our entire reverse zone was externally inaccessible for many months! (See previous pos

Re: Reverse address entries

2013-07-02 Thread Novosielski, Ryan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/02/2013 12:36 PM, John Horne wrote: > On Tue, 2013-07-02 at 14:42 +0100, Sam Wilson wrote: > >> Can anyone here give examples of the types of various software >> that will not operate without a PTR record? >> > Nope, and our entire reverse zone

Re: Reverse address entries

2013-07-02 Thread John Horne
On Tue, 2013-07-02 at 14:42 +0100, Sam Wilson wrote: > Can anyone here give examples of the types of various software that will > not operate without a PTR record? > Nope, and our entire reverse zone was externally inaccessible for many months! (See previous posts on the bind9-users list from me

Re: Reverse address entries

2013-07-02 Thread Barry Margolin
In article , Daniel McDonald wrote: > The other place reverse DNS is routinely queried is SMTP. If you care > enough to send mail, you should care enough to set up your reverse entries > realistically so that spam filters will recognize that you are trying to > actively manage your email server

Re: Reverse address entries

2013-07-02 Thread Daniel McDonald
On 7/2/13 8:42 AM, "Sam Wilson" wrote: > There may be a subtle language thing going on here. I read the original > post above as saying, literally, "you need PTR records because various > software tries to match A and PTR records". It doesn't say "you need > PTR records because some systems req

Re: Reverse address entries

2013-07-02 Thread Steven Carr
On 2 July 2013 14:42, Sam Wilson wrote: > Can anyone here give examples of the types of various software that will > not operate without a PTR record? There have already been numerous listings of software that require reverse lookups. SMTP being the main one. Other services like IRC and some data

Re: Reverse address entries

2013-07-02 Thread Sam Wilson
In article , Matus UHLAR - fantomas wrote: > >> >In article , > >> > Charles Swiger wrote: > >> >> Certainly. Various software performs what's called a double-reverse > >> >> lookup > >> >> to confirm that the A and PTR records match. > > >In article , > > Matus UHLAR - fantomas wrote: > >>

Re: Reverse address entries

2013-07-01 Thread Matus UHLAR - fantomas
>In article , > Charles Swiger wrote: >> Certainly. Various software performs what's called a double-reverse >> lookup >> to confirm that the A and PTR records match. In article , Matus UHLAR - fantomas wrote: He apparently meant exactly the same. Also calles FcRDNS - "forward confirmed" or

Re: Reverse address entries

2013-07-01 Thread Sam Wilson
In article , Matus UHLAR - fantomas wrote: > >> On Jun 28, 2013, at 10:54 AM, "Ward, Mike S" wrote: > >> > Hello all, is there any reason to setup reverse address entries for a > >> > zone? > > >In article , > > Charles Swiger wrote: > >> Certainly. Various software performs what's called a

Re: Reverse address entries

2013-07-01 Thread Matus UHLAR - fantomas
On Jun 28, 2013, at 10:54 AM, "Ward, Mike S" wrote: > Hello all, is there any reason to setup reverse address entries for a zone? In article , Charles Swiger wrote: Certainly. Various software performs what's called a double-reverse lookup to confirm that the A and PTR records match. On 0

Re: Reverse address entries

2013-07-01 Thread Sam Wilson
In article , Charles Swiger wrote: > On Jun 28, 2013, at 10:54 AM, "Ward, Mike S" wrote: > > Hello all, is there any reason to setup reverse address entries for a zone? > > Certainly. Various software performs what's called a double-reverse lookup > to confirm that the A and PTR records match

Re: Reverse address entries

2013-06-28 Thread Noel Butler
On Fri, 2013-06-28 at 13:57 -0400, Novosielski, Ryan wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > The short answer is "some software once cared." Does it still now, I'm > not sure. But we do it. SMTP does, IRC does signature.asc Description: This is a digitally signed messag

RE: Reverse address entries

2013-06-28 Thread Ward, Mike S
users@lists.isc.org Subject: Re: Reverse address entries At about Friday, June 28, 2013 10:54 AM Ward, Mike S" mailto:mw...@ssfcu.org>> wrote: >Hello all, is there any reason to setup reverse address entries >for a zone? It very much depends on the reasons for the forward

Re: Reverse address entries

2013-06-28 Thread Leonard Mills
At about Friday, June 28, 2013 10:54 AM Ward, Mike S" wrote: >Hello all, is there any reason to setup reverse address entries >for a zone? It very much depends on the reasons for the forward entries.  For example: Commercial backup software for Microsoft servers require forward-reverse-forwa

Re: Reverse address entries

2013-06-28 Thread Niall O'Reilly
On Fri, 28 Jun 2013 13:57:44 -0400 "Novosielski, Ryan" wrote: > The short answer is "some software once cared." Does it still now, I'm > not sure. But we do it. Some still does Niall O'Reilly ___ Please visit https://lists.isc.org/mail

Re: Reverse address entries

2013-06-28 Thread Mark Elkins
On Fri, 2013-06-28 at 17:54 +, Ward, Mike S wrote: > Hello all, is there any reason to setup reverse address entries for a > zone? I have asked some of the admins here and the consensus from them > is that only A records are necessary. Is this true? (IPv4 hat on) I've taught my staff to plan u

Re: Reverse address entries

2013-06-28 Thread Charles Swiger
On Jun 28, 2013, at 10:54 AM, "Ward, Mike S" wrote: > Hello all, is there any reason to setup reverse address entries for a zone? Certainly. Various software performs what's called a double-reverse lookup to confirm that the A and PTR records match. > I have asked some of the admins here and th

Re: Reverse address entries

2013-06-28 Thread Novosielski, Ryan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The short answer is "some software once cared." Does it still now, I'm not sure. But we do it. On 06/28/2013 01:56 PM, Ward, Mike S wrote: > Hello all, is there any reason to setup reverse address entries for > a zone? I have asked some of the admins