RE: about the A and PTR for sending mail

2011-11-11 Thread Murray S. Kucherawy
 -Original Message-
 From: bind-users-bounces+msk=cloudmark@lists.isc.org 
 [mailto:bind-users-bounces+msk=cloudmark@lists.isc.org] On Behalf Of Mark 
 Andrews
 Sent: Wednesday, November 09, 2011 7:06 PM
 To: 风河
 Cc: bind-us...@isc.org
 Subject: Re: about the A and PTR for sending mail
 
 While there is no RFC requirement that they match is there any reason
 not to make them match (the above records don't match) given that is
 the intent of the IN-ADDR.ARPA namespace?

Ideally I would agree, but there are some passable operational reasons for this 
to happen, and there are also some good operational ones as we enter IPv6-land.

Instead, I agree with another poster who suggested a mismatch or absence of 
this data in the DNS is good input to a scoring system, but not good grounds 
for outright rejection.

-MSK
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Re: about the A and PTR for sending mail

2011-11-10 Thread Hauke Lampe
On 10.11.2011 02:57, 风河 wrote:

 I have two server IPs, the A records for them are:
 
 mail.dnsbed.com.300 IN  A   74.117.233.4
 mail.dnsbed.com.300 IN  A   74.117.232.204
 
 The corresponding PTR records are:
 
 4.233.117.74.in-addr.arpa. 36466 IN PTR dnsbed.com.
 204.232.117.74.in-addr.arpa. 36453 IN   PTR dnsbed.com.

The forward lookup for dnsbed.com returns:;
173.245.61.41
173.245.61.115

The reverse entries for your nameserver don't have to match your
mailserver name but they must be consistent, i.e. the reverse must
resolve forward to the IP address.

mail.dnsbed.com - 74.117.233.4 - dnsbed.com - 74.117.233.4 would be a
consistent reverse/forward loop.

mail.dnsbed.com - 74.117.233.4 - dnsbed.com - 173.245.61.41 is not

Maybe the easiest way would be to change the PTRs of
4.233.117.74.in-addr.arpa. and 204.232.117.74.in-addr.arpa to
mail.dnsbed.com, so you don't have to move the A records of dnsbed.com


HTH,
Hauke.



signature.asc
Description: OpenPGP digital signature
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users