Weird behaviour in wildcard CNAME - is this feature or bug? Can it be changed?

Bob Harold rharolde at umich.edu
Tue Feb 11 21:38:20 UTC 2020


Perhaps a real example would help.
Here is an example of a captive portal root domain.  Everything goes to .25

.                               A       141.211.7.25
*.                              A       141.211.7.25

But I need everything except one host, dns1.itd.umich.edu, so I need
wildcards at every level:

.                               A       141.211.7.25
*.                              A       141.211.7.25
edu.                            A       141.211.7.25
*.edu.                          A       141.211.7.25
umich.edu.                      A       141.211.7.25
*.umich.edu.                    A       141.211.7.25
itd.umich.edu.                  A       141.211.7.25
*.itd.umich.edu.                A       141.211.7.25
dns1.itd.umich.edu.             A       192.12.80.214

-- 
Bob Harold


On Tue, Feb 11, 2020 at 11:16 AM Petr Bena <petr at bena.rocks> wrote:

> Oh, that explains it, I didn't know there is such a thing as "empty
> domain", thanks!
>
> On 11/02/2020 16:33, Matus UHLAR - fantomas wrote:
> > On 11.02.20 15:58, Petr Bena wrote:
> >> for example test.prod.app.pcp.cn.prod
> >>
> >> step 2) search the available zones - the zone in question here is
> >> pcp.cn.prod which is found
> >>
> >> step 3) no matching name is found but *.prod.app exists inside of
> >> pcp.cn.prod which is returned
> >>
> >> However, with payis.test.prod.app.pcp.cn.prod
> >>
> >> step 2) search the available zones - the zone in question here is
> >> pcp.cn.prod which is found
> >>
> >> step 3) no matching name is found, *.prod.app exists inside of
> >> pcp.cn.prod but NXDOMAIN is returned instead?
> >
> > because defining domain funding-gw.payis.prod.app.pcp.cn.prod defined
> > empty
> > domain payis.prod.app.pcp.cn.prod, and since it exists (although
> > empty), the
> > *.prod.app.pcp.cn.prod does not apply to payis.prod.app.pcp.cn.prod
> > nor to
> > any subdomain under it.
> >
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20200211/a34d012c/attachment.htm>


More information about the bind-users mailing list