Re: [Ext] Re: Redirect only second and third level domains
Hi, thank you all for the replies. "Don't do it" was also my first thought. Andrea Il 24/02/2017 21:19, /dev/rob0 ha scritto: > On Fri, Feb 24, 2017 at 02:05:54PM -0500, Warren Kumari wrote: >> -- >> I don't think the execution is relevant when it was obviously >> a bad idea in the first place. >> This is like putting rabid weasels in your pants, and later >> expressing regret at having chosen those particular rabid >> weasels and that pair of pants. >>---maf > LOL, perfect, thanks for that one. I've seen you use it before, but > it's especially fitting in this thread. :) -- I don't suffer from insanity, I enjoy every minute of it Ing. Andrea Gabellini Email: andrea.gabell...@telecomitalia.sm Skype: andreagabellini Tel: (+378) 0549 886111 Fax: (+378) 0549 886188 Telecom Italia San Marino S.p.A. Via XXVIII Luglio, 212 - Piano -2 47893 Borgo Maggiore Republic of San Marino http://www.telecomitalia.sm ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: [Ext] Re: Redirect only second and third level domains
On Fri, Feb 24, 2017 at 02:05:54PM -0500, Warren Kumari wrote: > -- > I don't think the execution is relevant when it was obviously > a bad idea in the first place. > This is like putting rabid weasels in your pants, and later > expressing regret at having chosen those particular rabid > weasels and that pair of pants. >---maf LOL, perfect, thanks for that one. I've seen you use it before, but it's especially fitting in this thread. :) -- http://rob0.nodns4.us/ Offlist GMX mail is seen only if "/dev/rob0" is in the Subject: ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: [Ext] Re: Redirect only second and third level domains
On Fri, Feb 24, 2017 at 1:12 PM, Edward Lewis wrote: > On 2/24/17, 03:42, "bind-users on behalf of Andrea Gabellini" wrote: > >>the server is a resolver for about 20K clients. My goal is to supply a >>courtesy page if a domain is not found. For every domain. > > No approach relying on wildcards will work because of the way wildcards > "work." (*.example.com won't catch non-existing abc.def.example.com if > cba.def.example.com exists.) > > There are commercial applications that do this, the one I know of from a > previous employer is http://www.barefruit.co.uk/. > > I don't know of any open solutions to this goal. > > (As you can tell from other replies, folks think this is a bad idea. But if > you are told to accomplish this by a manager, saying it's a bad idea isn't > what the manager wants to hear.) True, that may not be what the manager wants to hear -- but: A: that's not a good manager and B: not clearly explaining all of the risks, dangers, downsides to the manager (in writing if necessary) makes you a bad employee. Being a "Yes man" only gets you brownie points for a short while, but is bad for the organization and your management too -- it soon blows up and you have to explain why you didn't prevent bad things from happening... This email thread would be a useful thing to show management -- a bunch of people who run name-servers are all saying 'tis a bad idea. > > I can't think of an in-protocol or in-server solution. Given that you should > be mindful of the special use domain names too (.local or .onion as > examples), this begs an out of band solution and probably manual management. > > See > http://www.iana.org/assignments/special-use-domain-names/special-use-domain-names.xhtml#special-use-domain > for the special use domain names. > > Yup. good point. There are many many ways that this ends poorly, and basically none where it ends well W > > > ___ > Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe > from this list > > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- I don't think the execution is relevant when it was obviously a bad idea in the first place. This is like putting rabid weasels in your pants, and later expressing regret at having chosen those particular rabid weasels and that pair of pants. ---maf ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: [Ext] Re: Redirect only second and third level domains
On 2/24/17, 03:42, "bind-users on behalf of Andrea Gabellini" wrote: >the server is a resolver for about 20K clients. My goal is to supply a >courtesy page if a domain is not found. For every domain. No approach relying on wildcards will work because of the way wildcards "work." (*.example.com won't catch non-existing abc.def.example.com if cba.def.example.com exists.) There are commercial applications that do this, the one I know of from a previous employer is http://www.barefruit.co.uk/. I don't know of any open solutions to this goal. (As you can tell from other replies, folks think this is a bad idea. But if you are told to accomplish this by a manager, saying it's a bad idea isn't what the manager wants to hear.) I can't think of an in-protocol or in-server solution. Given that you should be mindful of the special use domain names too (.local or .onion as examples), this begs an out of band solution and probably manual management. See http://www.iana.org/assignments/special-use-domain-names/special-use-domain-names.xhtml#special-use-domain for the special use domain names. smime.p7s Description: S/MIME cryptographic signature ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
