CNAME Definition
digest at cihost.com
digest at cihost.com
Wed Feb 14 19:15:10 UTC 2001
So what is the proper way to define a CNAME zone for such an entry?
Thanks,
Digest
>RFC1034 3.6.2:
>
>"The domain system provides such a feature using the canonical name
>(CNAME) RR. A CNAME RR identifies its owner name as an alias, and
>specifies the corresponding canonical name in the RDATA section of the
>RR. If a CNAME RR is present at a node, no other data should be
>present; this ensures that the data for a canonical name and its aliases
>cannot be different. This rule also insures that a cached CNAME can be
>used without checking with an authoritative server for other RR types."
>
>In your example, its not rejecting the 'foreign' CNAMES, its rejecting the
>@ CNAME, as you have the myownjunk.com record containing a CNAME RR but
>also SOA and NS RR's, which is verboten.
>
>This has (as you can see) always been a violation of the RFC's as well.
>
>D
>
>At 3:03 PM -0600 2/3/01, asenec at senechalle.net wrote:
>>We just upgraded to 8.2.3-REL from 8.2.2-P7,
>>in response to the recent, CERT advisory and
>>find that CNAME's with a zone construct of the
>>form below no longer resolve. I find nothing
>>in RFC-1035 which would specifically prohibit
>>such a construct, but I do note that some
>>foreign registeries, such as deNIC, are now
>>rejecting domains with such CNAME definition.
>>
>>$ORIGIN com.
>>myownjunk IN SOA ns.theaccount.com. hostmaster.theaccount.com. (
>> 2001020312 86400 7200 3600000 172800 )
>> IN NS ns.theaccount.com
>> IN NS ns2.theaccount.com
>> IN CNAME asenec.com.
>>$ORIGIN myownjunk.com.
>>mail IN CNAME mail.asenec.com.
>>ftp IN CNAME ftp.asenec.com.
>>www IN CNAME www.asenec.com.
>>
>>Simply omitting the 'IN CNAME asenec.com.' record
>>enables resolution of mail/ftp/www.myownjunk.com,
>>but with 8.2.3-REL it seems impossible to resolve
>>myownjunk.com when it is defined as a CNAME.
>>Is it no longer possible to define a second-level
>>domain as a CNAME? If so, is there some RFC which
>>declares doing so as illegal?
>>
>>Annette
>>
>>--
>>+---------------------+-----------------------------------------+
>>| dredd at megacity.org | "Conan! What is best in life?" |
>>| Derek J. Balling | "To crush your enemies, see them |
>>| | driven before you, and to hear the |
>>| | lamentation of their women!" |
>>+---------------------+-----------------------------------------+
More information about the bind-users
mailing list