In article <[email protected]>, >dw> Just because you get a different answer from my authoritative server >dw> every time you query doesn't actually mean I am giving you >dw> incomplete answers, maybe I'm just changing the zone very very >dw> frequently? > >Yes, if the zone changes. But assuming the same SOA for the zone, giving >a different answer for the same query is breaking the "rules".
Actually, Dave is technically right. SOA serial numbers only matter for synchronizing zones via AXFR. Other than that, authoritative servers can give any answers they want. >But getting back to the original topic, the point is that using things >like DNS round robin or trying to load balance by giving different >responses to the same question will tend to bite you in the ass because >you might not want to follow the rules but someone else in the DNS chain >might be strict. Right, it's technically legal but it is a bad idea unless you understand what you're doing really really well and can do tricks like synthesized CNAMEs invented by CDNs. For a mail server, I agree that if you don't give the same answer every time (perhaps give or take the order of the records) you will shoot yourself in the foot soon enough. I also agree that except in the simplest cases, explicit SPF ip4: and ip6: clauses are a better idea than indirecting through a: and mx: clauses. _______________________________________________ mailop mailing list [email protected] https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
