What's the REAL DEAL with Underscores in BIND8.X?

[Barry Margolin]

In article <3807D8FE.4B9128E1 at daimlerchrysler.com>,
Kevin Darcy  <kcd at daimlerchrysler.com> wrote:
>What cost-justifications could there possibly be for such a forced
>migration?

Your site will not be accessible from clients whose software enforces the
rules.  There was a version of MacTCP a few years ago that rejected names
with underscores in them, but I think Apple got rid of the check in the
next version because their users encountered so many server sites that were
using them.  I used to be in our firewall support group, managing Gauntlet
firewalls for our customers, and its HTTP proxy wouldn't allow users to
access web sites with invalid hostnames like these.

This prohibition has been known for years.  BIND's default configuration
has rejected the names since 4.9.5, which came out about 3 years ago.  If
you've been ignoring the problem so long that you now have 7,000 hostnames
in violation, you dug the hole yourself.

-- 
Barry Margolin, barmar at bbnplanet.com
GTE Internetworking, Powered by BBN, Burlington, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.