[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-security] Anyone else get this error?



SW> Date: Sun, 29 Dec 2002 23:21:14 +0100
SW> From: Steffen Weinreich


SW> Whis is a great "tank you for using M$ Products" :-)
SW>
SW> M$ Active-Directory uses underscores in DNS names and
SW> violates the RFC's which defines a underscore as  an invalid
SW> character in DNS names.

Underscore is invalid in "public Internet" hostnames, yes.

However:

The DNS protocol itself allows eight-bit binary values in queries
and answers; refer to RFC1034 and RFC1035 for more info.  Note
sections 2.2.3 and 3.3 of RFC1035 in particular.  Reverse lookups
with classless delegation (see RFC2317) is another example of
"invalid" DNS information being perfectly acceptable.

This thread is a bit off-topic for security, though... the -users
list might be a better choice.


Eddy
--
Brotsman & Dreger, Inc. - EverQuick Internet Division
Bandwidth, consulting, e-commerce, hosting, and network building
Phone: +1 (785) 865-5885 Lawrence and [inter]national
Phone: +1 (316) 794-8922 Wichita

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Date: Mon, 21 May 2001 11:23:58 +0000 (GMT)
From: A Trap <blacklist@xxxxxxxxx>
To: blacklist@xxxxxxxxx
Subject: Please ignore this portion of my mail signature.

These last few lines are a trap for address-harvesting spambots.
Do NOT send mail to <blacklist@xxxxxxxxx>, or you are likely to
be blocked.