🚀 go-pugleaf

In <364d7b84.48248871@206.214.99.8> guru@ix.netcom.com.no.spam.maam writes:

>The following is an example of how my Microsoft DNS is  setup (remember to
>point the DNS of the workstations to the DNS host!):

>DNS host

>168.148.3.1		
>    cache
>    0.in-addr.arpa		-auto genned
>    127.in-addr.arpa	-auto genned
>    255.in-addr.arpa	-auto genned
>    3.148.168.in-addr.arpa			-reverse DNS
>    mydomain.com			- primary zone
>       mydomain.com     A               168.148.3.001
>       mydomain.com     NS            hostname.mydomain.com
>       mydomain.com     SOA         hostname.mydomain.com
>       hostname               A               168.148.3.001
>       hostname               MX            [10]    mail.mydomain.com
>       mail                         CNAME             mydomain.com
>       www                        CNAME             mydomain.com
>      ns1                           CNAME             mydomain.com


Assuming this is correct then you can not register your domain with
nominet (all top level .uk domains). They state you must have two active
DNS servers. Just 1 server means no registration, period.

Even worse this configiration *VIOLATES THE INTERNET HOST
REQUIREMENTS*. mail.mydomain.com is a CNAME record and is used an
MX. MX records *MUST* use canonical host names. sendmail will handle
this misconfiguration, fortunately for you.

Further there are bad things about this configuration anyway. The A
record for mydomain.com is a probably mistake---mydomain.com probably
should be not a computer name. There are missing records that the SOA
needs (mail addr and serial, just as a start).

Here is edited DNS information from a secondary DNS server. The IP
numbers and names have been modified. The server runs bind 8.1.2 which
has support for dynamic upodate support, change notification, improved
zone transfers and per domain access control. There is a patch for DNS
SEC if you want that support (the KEY and SIG records, plus a sig
record generator). IPv6 AAAA records are also supported.

; BIND version named 8.1.2 Tue Jun 23 21:53:04 BST 1998
; BIND version root@munin:/u6/lssd/bld/bind-8.1.2/src/bin/named
; zone 'secretdom.co.uk'   last serial 98111303
$ORIGIN co.uk.
secretdom       IN      SOA     ns.secretdom.co.uk. private.secretdom.co.uk. (
                98111304 1000 3600 604800 86400 )
                IN      NS      ns.secretdom.co.uk.
                IN      NS      ns.anotherdom.net.
                IN      NS      ns.yetanotherdom.co.uk.
                IN      MX      10 mx1.secretdom.co.uk.
                IN      MX      20 relay1.secretdom.co.uk.
$ORIGIN secretdom.co.uk.
smtp            IN      A       127.42.63.3
papua           IN      A       127.42.63.9
news            IN      A       127.42.63.252
fiji            IN      A       127.42.63.1
dialup1         IN      A       127.42.63.1
hosting         IN      CNAME   web1.secretdom.co.uk.
mx1             IN      A       127.42.63.2
pop             IN      A       127.42.63.2
web1            IN      CNAME   solomon.secretdom.co.uk.
solomon         IN      A       127.42.63.10

and of course 127.42.63.2 needs multiple PTR records (one per name).
The domain in question is in the co.uk domain and the names are
real. All unix hosts run sshd of course.

The real domain name is registered with nominet. Bar the editing and
reducing the number of hosts this information is provided neat. smtp
and pop could be CNAMEs.

Read a few RFCs before setting up your DNS and do it correctly.

Duncan (-: