Trouble With One Domain

Chris Thompson cet1 at cam.ac.uk
Fri Jun 26 14:45:03 UTC 2009


On Jun 26 2009, bsfinkel at anl.gov wrote:

>Why should we change the master server in the SOA record from oxygen,
>when oxygen is the real master?  It is a "hidden" master. 

That's fair - but as it is *hidden*, i.e. not responding to the
Internet in general, you shouldn't have it in the zone's NS RRset.
Advertising a known-to-be-unresponding nameserver is rude.

Apart from not using CNAMEs, you should aim to make the delegation
NS RRset at org the same as that in the zone itself, not a cut-down
subset. Otherwise you are losing quite a bit of the advantage of
having the extra official slaves.

-- 
Chris Thompson
Email: cet1 at cam.ac.uk



More information about the bind-users mailing list