On Mon, Jan 30, 2006 at 01:53:14PM +0100, 'Stephane Bortzmeyer' wrote:
> Since Afrinic works, things are certainly getting better. However, I
> just have to open a few messages at random in an african mailing list
> and I can find in the Received headers the following mail servers
> without PTR:
> 
> 62.56.190.2 (62.56.188.0/22 has not been transferred to Afrinic, for
> reasons I do not know) There is no arpa delegation from the RIR.

So RIPE and Afrinic didn't coordinate transfer of the netblock properly.
I don't see how this relates to the publication or otherwise of a draft
which encourages DNS admins to provide PTR records.

> 213.136.96.104 There is a delegation but no PTR

So, we seem to have an ISP in Cote d'Ivoire that hasn't bothered with
international best practice.  Maybe publishing an RFC that recommends
that they do, in fact, provide PTR records, will help this situation.
It might mean that the responsible individuals can become aware of the
issue, and justify to management why they should spend effort on what
otherwise can seem an unnecessary frill.

Prior to the establishment of Afrinic, large amounts of address space was
delegated to ISPs and organisations all over Africa, and PTR records were
set up for these as a matter of course.  Some other African organisations
chose not to provide PTR records.  However, I don't see why we should
accept poor operational practice and use it to justify why we should
not publish a document that intends to help the situation.

In fact, your arguments seem to completely support publication of the
draft.  If people are already blackholing based on lack of PTR mapping
(which clearly they are), then publishing a document 1) encouraging people
to provide these mappings, and 2) discouraging the practice of filtering
based on non-availability of PTR records, both seem to be highly sensible.

(Greetings from Johannesburg, South Africa)

-- Andras Salamon                   [EMAIL PROTECTED]
.
dnsop resources:_____________________________________________________
web user interface: http://darkwing.uoregon.edu/~llynch/dnsop.html
mhonarc archive: http://darkwing.uoregon.edu/~llynch/dnsop/index.html

Reply via email to