Verisign fix doesn't fix .tv - what are they doing differently?

Ray ray.list at powerweb.net
Wed Sep 17 14:49:37 UTC 2003


On Wednesday 17 September 2003 09:04, you wrote:
> So I have installed the fix for Verisign's most recent defect and
> have a followup question:
>
> Verisign kindly provided the names of other gTLDs which also do
> wildcarding. I decided to treat them the same way:
>
>    // Sod you Verisign
>    zone "com" in { type delegation-only; };
>    zone "net" in { type delegation-only; };
>    // and the rest of you micky-mouse outfits
>    // .cc, .cx, .io, .mp, .nu, .ph, .td, .tk, .tv, and .ws
>    zone "cc" in { type delegation-only; };
>    zone "cx" in { type delegation-only; };
>    zone "io" in { type delegation-only; };
>    zone "mp" in { type delegation-only; };
>    zone "nu" in { type delegation-only; };
>    zone "ph" in { type delegation-only; };
>    zone "td" in { type delegation-only; };
>    zone "tk" in { type delegation-only; };
>    zone "tv" in { type delegation-only; };
>    zone "ws" in { type delegation-only; };
>
> This works fine except for some but not .io, .mp, .td, and .tv:
> so what are they doing differently? And is there an similarly
> elegant solution for these clowns?
>
> Thanks,
> Keith Hanlan
> Ottawa, Canada

.tv, .io don't appear to be doing it.  .mp and .td are doing it though.  
.td is using a CNAME rather then an A though and that may be how this 
clowns is getting by. i don't see what is different about .mp, but i'm no 
guru by any stretch of ego or disillusion.

dig "*.tv"

; <<>> DiG 9.2.1 <<>> *.tv
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28877
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;*.tv.                          IN      A

;; AUTHORITY SECTION:
tv.                     358     IN      SOA     ns1.nic.tv. 
hostmaster.www.tv. 2003091701 1800 900 
2419200 600

;; Query time: 57 msec
;; SERVER: 64.118.32.22#53(64.118.32.22)
;; WHEN: Wed Sep 17 09:37:49 2003
;; MSG SIZE  rcvd: 81

dig "atddeurcdoeucx.tv"

; <<>> DiG 9.2.1 <<>> atddeurcdoeucx.tv
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37625
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;atddeurcdoeucx.tv.             IN      A

;; AUTHORITY SECTION:
tv.                     600     IN      SOA     ns1.nic.tv. 
hostmaster.nic.tv. 2003091701 1800 900 
2419200 600

;; Query time: 96 msec
;; SERVER: 64.118.32.22#53(64.118.32.22)
;; WHEN: Wed Sep 17 09:38:15 2003
;; MSG SIZE  rcvd: 92


More information about the bind-users mailing list