lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
From: DaleB at BETWWTS.com (Dale Babiy) Subject: Reverse dns -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Rfc1912 section 2.1 says: "Every Internet-reachable host should have a name. The consequences of this are becoming more and more obvious. Many services available on the Internet will not talk to you if you aren't correctly registered in the DNS. Make sure your PTR and A records match. For every IP address, there should be a matching PTR record in the in-addr.arpa domain. If a host is multi-homed, (more than one IP address) make sure that all IP addresses have a corresponding PTR record (not just the first one). Failure to have matching PTR and A records can cause loss of Internet services similar to not being registered in the DNS at all. Also, PTR records must point back to a valid A record, not a alias defined by a CNAME. It is highly recommended that you use some software which automates this checking, or generate your DNS data from a database which automatically creates consistent data." That's as close as I could come in a short skim. At the very least it's recommended, and probably a best practice. - --- Dale Babiy Network Manager, Tasman Gaming Inc NOTE: This email is signed with a PGP key. My key is available on the public server, and voice confirmation of the key fingerprint is available upon request. -----BEGIN PGP SIGNATURE----- Version: PGP 8.1 iQIVAwUBQjB1OYoLktyFZ6MpAQKuIA/+IIyYzXMUqRUucSQTadcVlecgeE4hRjg+ U+vJUjIj5MniqSU/VZAdM/nOVGmJ7caffzmY3DaNEHNK0h69SdcKpwTkU7YLbA84 5uEdhEcbLnyB8gW0Of+nngouug1MRL2Wh20s+GEnLQJPgKxWRhrYv/b8Vqu7OpaF PIJt58bccb729mTe/yMwjM4LUymBgPR/8REM6wagWrwC8OR0TU+6OUXH+Xmd84kq 4N25aWCgEp75N5615f6sDyCQRErZ7KtBS268YCfO51Z1db0TDQVqWeTUS8nAvXsu Ya18dTdTziHqZeDpKWNRq2+v+mXqmHOy2Z3mdrYkaehisUeNhglpMHKFZHvEwQV5 +K2lH+p7KMwNUSZCsuQBefNJ/w1RR7FIZJ9E96k/EMEJRmi6e+k4Bspjhel7scqy xNGJAwQ2b4zmrAY2NzGNmXdQIPUJvJszZvBOTMFQZljpklB9ia/2yAgP/kKhYQhr 9SVtEuEE9jxh81RIJyRIxYrNt6v/qzQ9eo4pf6j9r80b+kW0rW0qf2f/ZvDHz+l0 GDAp+TJM1dNK+93qJKCC8+TWFH7IvslJ/Ow0KMyHArcQlhy0MrJo3gbdhmBu8p2Q Xh+YCB9s0k7Q1t+fwxv+p8YhLvj3WcZyxHI8iU5fEQ079chq4WZ4xZ9G0UnE1MnZ 5epMnuntqtU= =y2gW -----END PGP SIGNATURE-----
Powered by blists - more mailing lists