|
Thread Index RE: [isp-dns] Split DNS
A) I did not suggest anyone spoof anything B) I actually posted this reply days ago so no idea why it only showed up now. One would presume that he owns the domain and the name servers in question and has no need to spoof anything. Delegating sub domains to a different authoritive NS is actually documented in the manuals of all dns systems I have used, so if you think they are all promoting bad practices, best to have words with them and not shoot the messenger. -----Original Message----- From: Len Conrad [mailto:LConrad@...] Sent: 03 October 2007 02:13 To: isp-dns@isp-dns.com Subject: RE: [isp-dns] Split DNS >If by different resources your saying that >www.domain.com is on the outside but mail.domain.com is on the inside then >this should not be a problem. >You can make your NS authoritive for domain.com spoofing domain authority is bad practice. >and specify another external >NS as authoritive for mail.domain.com An NS spoofing authority for domain.com and then also delegating sub.domain.com to the authoritative NS is REALLY bad practice. Delegation of sub.domain.com would have to be done for every sub-domain of domain.com. The only way to keep the spoofing NS and the auth NS in sync is manually, which means they will be out of sync in practice. The way I recommended is the best practice, because it uses the standard facilities of the DNS protocol to solve the demand. Len ______________ ______________ To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. Copyright 2007 Jupitermedia Corporation All Rights Reserved. To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. Copyright 2007 Jupitermedia Corporation All Rights Reserved.
Thread Index |
|
