rfc1918 ns records coming from internet are queried?

[Gregory Hicks]

> Date: Wed, 26 Nov 2008 21:09:53 +0100 (CET)
> To: dave at ca.sophos.com
> Subject: Re: rfc1918 ns records coming from internet are queried?
> From: sthaug at nethelp.no
> Cc: bind-users at isc.org
> 
> > > A border router knows what is "inside" and "outside" your network, while
> > > a DNS server does not. Important difference.
> > 
> > You're missing the point.  This is not about inside and outside networks, it
> > is about rfc1918 responses from internet queries.
> 
> I'm afraid I have seen too many organizations using a mix of public and
> RFC1918 IP addresses on the "inside". Thus I don't believe that you can
> differentiate based on RFC1918 addresses or not on a general basis.

Actually, I got the impression that the OP wanted to know if BIND would
ignore and NS records provided by some server on the internet that
pointed to RFC-1918 type IP addresses.  (It could be that everyone is
talking to the same thing...)

If BIND sends out a request, as it should, to some set of NS record IP
addresses, it keeps a record of WHEN the request was sent out and marks
how long it takes to get a response back from those requests.  The
RFC-1918 type addresses SHOULD never respond - unless you happen to
have a server at the same address that someone else is advertizing.
(The "SHOULD never respond" is driven by the BCP-38 filtering at edge
routers.)  Thus those addresses will have ungodly high round trip times
and should be removed from further queries...

(My read of how it works.  I could be wrong though.)

Regards,
Gregory Hicks

> 
> Steinar Haug, Nethelp consulting, sthaug at nethelp.no
> _______________________________________________
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

---------------------------------------------------------------------
Gregory Hicks                           | Principal Systems Engineer
                                        | Direct:   408.569.7928

People sleep peaceably in their beds at night only because rough men
stand ready to do violence on their behalf -- George Orwell

The price of freedom is eternal vigilance.  -- Thomas Jefferson

"The best we can hope for concerning the people at large is that they
be properly armed." --Alexander Hamilton