RPZ seems to be hit and miss

2014-01-10 Thread Howard, Christopher Bryan
For reference: BIND 9.9.4-P1 CentOS 6.4 64bit arch We use RPZ to CNAME all of the “bad” domains over to a catch-all type server that can display a message to the user. Until recently it has been working perfectly (or we thought it was :-P ). The problem: RPZ appears to have stopped working

Sites that points their A Record to localhost

2014-01-10 Thread Eduardo Bonsi
I have an issue happening here. I actually do have a vague idea what it is but I am not real sure how is happening and how to avoid it. I was doing a research the other day and landed on this domain; p3net.net I found a little strange when I logged into this domain because rather than seeing

Re: RPZ seems to be hit and miss

2014-01-10 Thread Alan Clegg
On Jan 10, 2014, at 1:32 PM, Howard, Christopher Bryan christopher-how...@utc.edu wrote: For reference: BIND 9.9.4-P1 CentOS 6.4 64bit arch We use RPZ to CNAME all of the “bad” domains over to a catch-all type server that can display a message to the user. Until recently it has been

Re: Sites that points their A Record to localhost

2014-01-10 Thread Alan Clegg
On Jan 10, 2014, at 3:01 PM, Eduardo Bonsi beart...@pacbell.net wrote: I have an issue happening here. I actually do have a vague idea what it is but I am not real sure how is happening and how to avoid it. I was doing a research the other day and landed on this domain; p3net.net Yes,

Re: Sites that points their A Record to localhost

2014-01-10 Thread Dave Warren
On 2014-01-10 12:25, Alan Clegg wrote: On Jan 10, 2014, at 3:01 PM, Eduardo Bonsi beart...@pacbell.net wrote: I have an issue happening here. I actually do have a vague idea what it is but I am not real sure how is happening and how to avoid it. I was doing a research the other day and

Re: Sites that points their A Record to localhost

2014-01-10 Thread WBrown
From: Alan Clegg a...@clegg.com Yes, it seems that they have an A record for that label that provides the IP address 127.0.0.1. You probably want to ask the owner of the zone about this, as I?m not sure what the community can do about it. They have an MX record, so perhaps the domain is

Re: Sites that points their A Record to localhost

2014-01-10 Thread Dave Warren
On 2014-01-10 12:36, wbr...@e1b.org wrote: From: Alan Clegg a...@clegg.com Yes, it seems that they have an A record for that label that provides the IP address 127.0.0.1. You probably want to ask the owner of the zone about this, as I?m not sure what the community can do about it. They have

Re: RPZ seems to be hit and miss

2014-01-10 Thread Howard, Christopher Bryan
I¹ve just been using the RPZ built into BIND. I don¹t think I was aware of RPZ 2. -Christopher On 1/10/14, 3:23 PM, Alan Clegg a...@clegg.com wrote: On Jan 10, 2014, at 1:32 PM, Howard, Christopher Bryan christopher-how...@utc.edu wrote: For reference: BIND 9.9.4-P1 CentOS 6.4 64bit

Re: Sites that points their A Record to localhost

2014-01-10 Thread King, Harold Clyde (Hal)
-Original Message- From: Dave Warren da...@hireahit.com Date: Friday, January 10, 2014 at 15:47 To: Bind Users bind-users@lists.isc.org Subject: Re: Sites that points their A Record to localhost On 2014-01-10 12:36, wbr...@e1b.org wrote: From: Alan Clegg a...@clegg.com Yes, it seems

Re: Sites that points their A Record to localhost

2014-01-10 Thread Eduardo Bonsi
Thanks everyone for the input on this matter! Dave Warren said: ...And less A records if they don't intend to do anything but email. But it's an imperfect world. No doubt it is! Like I said, it is not a big deal! Is not that people are able to re-route anything. That just happens because my

Re: Sites that points their A Record to localhost

2014-01-10 Thread /dev/ph0b0s
On 01/10, Eduardo Bonsi wrote: I know how it is happening and my concern was if that could generate any technical or security problems on my site. no ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

Re: Sites that points their A Record to localhost

2014-01-10 Thread Joseph S D Yao
On 2014-01-10 15:01, Eduardo Bonsi wrote: ... It seems like they have their domain configuration A Record pointed to the localhost. We all know that the localhost is not routable outside of the internet. Therefore I am sure their website cannot resolve out of the 127.0.0.1. In addition to that,