full-disclosure - Reverse dns

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <E4C6223704D6D94AAB199151743AD8C0021F0ED0@DEDE.BETWWTS.COM>
From: DaleB at BETWWTS.com (Dale Babiy)
Subject: Reverse dns

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Rfc1912 section 2.1 says:

   "Every Internet-reachable host should have a name.  The
consequences
   of this are becoming more and more obvious.  Many services
available
   on the Internet will not talk to you if you aren't correctly
   registered in the DNS.

   Make sure your PTR and A records match.  For every IP address,
there
   should be a matching PTR record in the in-addr.arpa domain.  If a
   host is multi-homed, (more than one IP address) make sure that all
IP
   addresses have a corresponding PTR record (not just the first
one).
   Failure to have matching PTR and A records can cause loss of
Internet
   services similar to not being registered in the DNS at all.  Also,
   PTR records must point back to a valid A record, not a alias
defined
   by a CNAME.  It is highly recommended that you use some software
   which automates this checking, or generate your DNS data from a
   database which automatically creates consistent data."

That's as close as I could come in a short skim.  At the very least
it's recommended, and probably a best practice.

- ---
Dale Babiy
Network Manager,
Tasman Gaming Inc

NOTE: This email is signed with a PGP key.  My key is available on
the public server, and voice confirmation of the key fingerprint is
available upon request.

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

iQIVAwUBQjB1OYoLktyFZ6MpAQKuIA/+IIyYzXMUqRUucSQTadcVlecgeE4hRjg+
U+vJUjIj5MniqSU/VZAdM/nOVGmJ7caffzmY3DaNEHNK0h69SdcKpwTkU7YLbA84
5uEdhEcbLnyB8gW0Of+nngouug1MRL2Wh20s+GEnLQJPgKxWRhrYv/b8Vqu7OpaF
PIJt58bccb729mTe/yMwjM4LUymBgPR/8REM6wagWrwC8OR0TU+6OUXH+Xmd84kq
4N25aWCgEp75N5615f6sDyCQRErZ7KtBS268YCfO51Z1db0TDQVqWeTUS8nAvXsu
Ya18dTdTziHqZeDpKWNRq2+v+mXqmHOy2Z3mdrYkaehisUeNhglpMHKFZHvEwQV5
+K2lH+p7KMwNUSZCsuQBefNJ/w1RR7FIZJ9E96k/EMEJRmi6e+k4Bspjhel7scqy
xNGJAwQ2b4zmrAY2NzGNmXdQIPUJvJszZvBOTMFQZljpklB9ia/2yAgP/kKhYQhr
9SVtEuEE9jxh81RIJyRIxYrNt6v/qzQ9eo4pf6j9r80b+kW0rW0qf2f/ZvDHz+l0
GDAp+TJM1dNK+93qJKCC8+TWFH7IvslJ/Ow0KMyHArcQlhy0MrJo3gbdhmBu8p2Q
Xh+YCB9s0k7Q1t+fwxv+p8YhLvj3WcZyxHI8iU5fEQ079chq4WZ4xZ9G0UnE1MnZ
5epMnuntqtU=
=y2gW
-----END PGP SIGNATURE-----