[bind10-dev] Non-absolute names for $ORIGIN

Mark Andrews marka at isc.org
Mon Dec 17 10:53:27 UTC 2012


In message <50CEF4FC.3080004 at isc.org>, Stephen Morris writes:
> I've just noticed a comment from Jinmei in the bind10 jabber room:
> 
> "another corner case: is it okay to specify a non-absolute name for
> $ORIGIN? BIND 9 allows it - NSD doesn't"

I would argue that NSD is broken.  Nothing in RFC 103[45] states
that $ORIGIN does not accept relative names.

> A couple of points come to mind:
> 
> Firstly if $ORIGIN is a relative name, then what is it relative to?

The current origin the same as any other relative name.
 
> Secondly, the omission of a trailing "." in a $ORIGIN statement caused
> a ccTLD to go off-line a few years ago. Perhaps we could make
> acceptance of relative names for $ORIGIN a BIND 10 configuration
> option?  Some users may welcome the ability to catch a common error.

There are lots of ways to break a zone.

> Stephen
> _______________________________________________
> bind10-dev mailing list
> bind10-dev at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind10-dev
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org


More information about the bind10-dev mailing list