tensai at zmonkey.org
Fri Sep 23 00:13:42 MDT 2005
On Thu, 2005-09-22 at 23:04 -0600, Michael Torrie wrote:
> On Thu, 2005-09-22 at 21:22 -0600, Corey Edwards wrote:
> > Sorry, that really is pretty ambiguous. I meant that anything in
> > subdomain.foo.example.com won't resolve to the normal address. I started
> > thinking about it and I wasn't sure why that is, so I ran a few tests.
> > One of the domains that I forge is slashdot.org. As expected,
> > yro.slashdot.org won't resolve on my box. Yay! That's because Bind
> > believes it is authoritative for the whole *.slashdot.org zone, so
> > anything not listed doesn't exist. foo.bar.yro.slashdot.org doesn't work
> > either.
> That's not good for me then. Darn it.
Here's something you can do:
slashdot IN SOA slashdot.org. hostmaster.slashdot.org. (
2005092101 ; Serial
1H ; Refresh - 8h
1H ; Retry - 2h
4W ; Expire - 4w
1H ; Negative Cache TTL - 1d
www IN A 127.0.0.1
yro IN NS ns1.ostg.com.
yro IN NS ns1.vasoftware.com.
Basically you're forging authority for their domain and then delegating
the subdomains back to them. The drawback there is that you have to
track NS changes (which should be infrequent) and you have to enumerate
all subdomains you want to work.
Will that do the trick?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://plug.org/pipermail/plug/attachments/20050923/c9f39b68/attachment.bin
More information about the PLUG