Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Matthew Palmer
I've been directed to put all of the internal hosts and such into the public DNS zone for a client. My typical policy is to have a subdomain of the zone served internally, and leave only the publically-reachable hosts in the public zone. But this client, having a large number of hosts on

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Petri Helenius
Matthew Palmer wrote: I've been directed to put all of the internal hosts and such into the public DNS zone for a client. My typical policy is to have a subdomain of the zone served internally, and leave only the publically-reachable hosts in the public zone. But this client, having a large

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Gadi Evron
On Mon, 18 Sep 2006, Matthew Palmer wrote: I've been directed to put all of the internal hosts and such into the public DNS zone for a client. My typical policy is to have a subdomain of the zone served internally, and leave only the publically-reachable hosts in the public zone. But this

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Gadi Evron
On Mon, 18 Sep 2006, Petri Helenius wrote: Matthew Palmer wrote: I've been directed to put all of the internal hosts and such into the public DNS zone for a client. My typical policy is to have a subdomain of the zone served internally, and leave only the publically-reachable hosts in

Re: IPv6 PI block is announced - update your filters 2620:0000::/23

2006-09-18 Thread Michael . Dillon
Yes, please, let's have that flamewar all over again... Or you couldjust read one or more of the previous flamewars and spare us another round. Here's a starting point: The problem with this suggestion is that it doesn't have an end-point. If someone would summarize both the pros and the

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Simon Waters
On Monday 18 Sep 2006 07:40, you wrote: I know the common wisdom is that putting 192.168 addresses in a public zonefile is right up there with kicking babies who have just had their candy stolen, but I'm really struggling to come up with anything more authoritative than just because, now eat

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Jim Mercer
On Mon, Sep 18, 2006 at 03:18:07AM -0500, Gadi Evron wrote: On Mon, 18 Sep 2006, Petri Helenius wrote: Matthew Palmer wrote: I've been directed to put all of the internal hosts and such into the public DNS zone for a client. My typical policy is to have a subdomain of the zone

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Joe Maimon
Matthew Palmer wrote: I've been directed to put all of the internal hosts and such into the public DNS zone for a client. My typical policy is to have a subdomain of the zone served internally, and leave only the publically-reachable hosts in the public zone. This sounds like you have

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Daniel Senie
At 04:33 AM 9/18/2006, Jim Mercer wrote: On Mon, Sep 18, 2006 at 03:18:07AM -0500, Gadi Evron wrote: On Mon, 18 Sep 2006, Petri Helenius wrote: Matthew Palmer wrote: I've been directed to put all of the internal hosts and such into the public DNS zone for a client. My typical policy

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Jim Mercer
On Mon, Sep 18, 2006 at 08:36:44AM -0400, Daniel Senie wrote: At 04:33 AM 9/18/2006, Jim Mercer wrote: if the hosts inside the VPN can only be accessed by hostnames served up inside the VPN, then it is more likely the users can be confident that their data is actually traversing the VPN.

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Michael Nicks
Likewise our inbound sanity route-maps deny all RFC1918 space. -- Michael Nicks Network Engineer KanREN e: [EMAIL PROTECTED] o: +1-785-856-9800 x221 m: +1-913-378-6516 Simon Waters wrote: On Monday 18 Sep 2006 07:40, you wrote: I know the common wisdom is that putting 192.168 addresses in

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Fred Baker
I know the common wisdom is that putting 192.168 addresses in a public zonefile is right up there with kicking babies who have just had their candy stolen, but I'm really struggling to come up with anything more authoritative than just because, now eat your brussel sprouts. I think the

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Peter J. Cherny
At 04:40 PM 18/9/06, Matthew Palmer wrote: I've been directed to put all of the internal hosts and such into the public DNS zone for a client. ... But this client, having a large number of hosts on RFC1918 space and a VPN for external people to get to it, ... What happens when the external

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Gadi Evron
On Mon, 18 Sep 2006, Fred Baker wrote: I know the common wisdom is that putting 192.168 addresses in a public zonefile is right up there with kicking babies who have just had their candy stolen, but I'm really struggling to come up with anything more authoritative than just

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Peter Dambier
Matthew Palmer wrote: I've been directed to put all of the internal hosts and such into the public DNS zone for a client. My typical policy is to have a subdomain of the zone served internally, and leave only the publically-reachable hosts in the public zone. But this client, having a large

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Valdis . Kletnieks
On Mon, 18 Sep 2006 17:57:43 +0200, Peter Dambier said: It can make sense: I am sending my mails mostly from lumbamba.peter-dambier.de (192.168.48.226) my router is krzach.peter-dambier.de (192.168.48.2) my mailer is echnaton.peter-dambier.de (192.168.48.228) My traceroute looks ok

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Elijah Savage
- Original Message - From: Matthew Palmer [EMAIL PROTECTED] To: nanog@merit.edu Sent: Monday, September 18, 2006 2:40:04 AM GMT-0500 Subject: Why is RFC1918 space in public DNS evil? I've been directed to put all of the internal hosts and such into the public DNS zone for a client. My

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Roland Dobbins
On Sep 18, 2006, at 12:12 PM, Elijah Savage wrote: I've been directed to put all of the internal hosts and such into the public DNS zone for a client. Another option is split-horizon DNS for the internal stuff, if it never needs to be publicly visible.

Re: Why is RFC1918 space in public DNS evil?

2006-09-18 Thread Elijah Savage
- Original Message - From: Roland Dobbins [EMAIL PROTECTED] To: nanog@merit.edu Sent: Monday, September 18, 2006 3:17:01 PM GMT-0500 Subject: Re: Why is RFC1918 space in public DNS evil? On Sep 18, 2006, at 12:12 PM, Elijah Savage wrote: I've been directed to put all of the internal

Zimbabwe satellite service shutdown for non-payment

2006-09-18 Thread Sean Donelan
Intelsat has shutdown the primary satellite link for Zimbabwe's state communications company for non-payment, which has affected most of the ISPs in the country.

Re: Zimbabwe satellite service shutdown for non-payment

2006-09-18 Thread Gadi Evron
On Mon, 18 Sep 2006, Sean Donelan wrote: Intelsat has shutdown the primary satellite link for Zimbabwe's state communications company for non-payment, which has affected most of the ISPs in the country. I can't really blame them. I doubt the Internet is considered critical