RPZ and www.rackspace.com

David A. Evans Evans_David_A at cat.com
Wed May 7 14:57:44 UTC 2014


        No,  *rackspace* appears nowhere in our RPZ feeds save the new 
entry that works around the issue.   This entry excludes it from hitting 
the RPZ zone with the NSDNAME records via a PASSTHRU line a earlier  RPZ 
zone.


David A. Evans
Enterprise IP/DNS Management
Network Infrastructure Tools and Services
(309) 675-9700 
Evans_David_A at cat.com



From:   Phil Mayers <p.mayers at imperial.ac.uk>
To:     bind-users at lists.isc.org
Date:   05/07/2014 09:30 AM
Subject:        Re: RPZ and www.rackspace.com
Sent by:        bind-users-bounces at lists.isc.org



On 07/05/14 15:05, David A. Evans wrote:

>
>          Can anyone else verify this behavior?   What is going on with
> www.rackspace.com?   If this is a miss configuration on Rackspace's DNS
> servers how are they not getting hit with support calls like crazy?

We don't have any NSDNAME RPZ entries, and see no problem.

Note that the CNAME points to a delegated sub-zone, wip.rackspace.com - 
probably a load-balancer. Do any of the 3 NS records for that:

www-gtm-ord1.rackspace.com
www-gtm-lon3.rackspace.com
www-gtm-iad2.rackspace.com

...appear in your NSDNAME list?
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to 
unsubscribe from this list

bind-users mailing list
bind-users at lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20140507/7334032b/attachment.html>


More information about the bind-users mailing list