Can an RPZ record be used for a non-existed domain?

Carl Byington carl at byington.org
Thu Mar 24 22:34:30 UTC 2022


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On Thu, 2022-03-24 at 16:13 -0600, Grant Taylor via bind-users wrote:

> But there seems to be a disconnect.

> I was talking about adding a domain that is outbound.example.com. and
> put the A / AAAA records in that domain's apex.  Thus you are only
> overriding outbound.example.com and nothing else in the example.com
> domain.

Yes, the disconnect was my brain. I will try to plug that back in.


> We must have different experiences and / or have used different MTAs.
> I've routinely been able to address one offs do to lack of PTR via
> /etc/hosts entries.

How do you do that in /etc/hosts? Suppose the mail arrives from a.b.c.d,
and they have some name outbound.example.com A a.b.c.d, but d.c.b.a.in-
addr.arpa does not exist.

For some users, for some (possibly all) senders, we require that d.c.b.a
.in-addr.arpa has some PTR record where the corresponding A record
resolves back to a.b.c.d.


-----BEGIN PGP SIGNATURE-----

iHMEAREKADMWIQSuFMepaSkjWnTxQ5QvqPuaKVMWwQUCYjzxpxUcY2FybEBmaXZl
LXRlbi1zZy5jb20ACgkQL6j7milTFsHPYgCeNHTOSOzTq78dKjx6/WUyfJ2w8+kA
nAqRrCYz72YZrMxyH7OYcP6VCM3R
=l8G6
-----END PGP SIGNATURE-----




More information about the bind-users mailing list