Looking for pointers

Jim Reid jim at rfc1035.com
Wed Jul 12 11:05:16 UTC 2000


>>>>> "Scott" == Scott Kindley <webmaster at kindley.net> writes:

    Scott> Isn't posting of the information in my zone files and such
    Scott> kinda risky?  I mean isn't there a consequence to doing
    Scott> that?

[sarcasm mode on]

Yeah, if you provide your zone files and such like somebody on this
list would be able to troubleshoot your DNS problems. If you tell us
that stuff, someone could find the broken resource records or screwed
up delegations or misconfigured name server, etc, etc. You obviously
don't want that to happen, do you? I mean, some of the experts on this
list can solve people's DNS problems by telepathy. They can identify
the problems by sensing the psychic aura from their computers whenever
they get postings about mydomain.com or IP address x.x.x.x. So
whatever you do, don't ever give 'em that information. Mind-reading is
much, much easier when you don't provide the slightest clue to what
could be wrong.

[sarcasm mode off]


Seriously, *anyone* who posts questions about their DNS problems
should *always* provide exact copies of relevant information: zone
files, BIND version, config files, IP addresses, domain names, log
entries and so on. And resist the temptation to prettify these files.
Just show exactly what's there: no more, no less.

You should also be aware that the DNS is a public database. If the
public can't find your details in the DNS, they can't reach you to get
to your web site or deliver mail to your mail server. Perhaps this is
not a good idea for someone on the internet? So if your DNS zone files
contain truly secret or sensitive information - why would your
hostnames, IP addresses and web/mail server details be secret? - you
shouldn't make them available to public.



More information about the bind-users mailing list