On Tue, 2012-03-06 at 08:23 +1100, Mark Andrews wrote:

> In message <[email protected]>, hugo hugoo writes:
> > 
> > Dear all,
> > 
> > Can anyone help me with  its experience on reverse dns for IPV6?
> > Presently, when we reverse an IPV4 subnet for clients, we configure all=
> >  the reverse for the whole subnet.
> > It is a lot of PTR's but perfectly manageable.
> > 
> > With IPV6,  the number of IP's that we will receive is amazing....
> > So...it seems impossible for every single IPV6 inthe range to configure a P=
> > TR.
> > 
> > So...what to do?
> > What is the common practice?
> > What is possible with BIND?
> > 
> > Thanks in advance for your answer.
> 
> Let the machines register their own PTR record using TCP as the authenticator.
> 
>       update-poliy {
>               grant . tcp-self * PTR;
>       };
> 


Thats dangerous   14m1337.u.suck.hax0r.org  -    yeah, it would be
highly abused and why most ISP's don't do/allow it :)
But for a small company that has trustworthy staff, maybe, but then mail
servers will start rejecting some of them trying to send directly
because theres likely no matching A record.




> Mark


<<attachment: face-smile.png>>

Attachment: signature.asc
Description: This is a digitally signed message part

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to