On Sat, 10 Apr 2004, JINMEI Tatuya / [ISO-2022-JP] [EMAIL PROTECTED]@C#:H wrote: > And I'd clarify in the classification at the beginning of this section > that the corresponding DNS reverse zone is also delegated in the last > two cases. > > So, the entire section would be as follows: > > 7.5 DDNS with Dynamic Prefix Delegation > > In cases where a prefix, instead of an address, is being used and > updated, one should consider what is the location of the server where > DDNS updates are made. That is, where the DNS server is located: > > 1. At the same organization as the prefix delegator. > > 2. At the site where the prefixes are delegated to. In this case, > the authority of the DNS reverse zone corresponding to the > delegated prefix is also delegated to the site. > > 3. Elsewhere; this implies a relationship between the > site and where DNS server is located, and such a relationship > should be rather straightforward to secure as well. Like in > the previous case, the authority of the DNS reverse zone is > also delegated. > > In the first case, managing...
Sounds good, added. Thanks. I've also added note in the next paragraph noting that the prefix delegator, with case 1, may not actually provide any DDNS service but just insert a wildcard record, and refer to section 7.2: In the first case, managing the reverse DNS (delegation) is simpler as the DNS server and the prefix delegator are in the same administrative domain (as there is no need to delegate anything at all); alternatively, the prefix delegator might forgo DDNS reverse capability altogether, and use e.g., wildcard records (as described in Section 7.2). In the other cases, it can be slighly more difficult, particularly as the site will have to configure the DNS server to be authorative for the delegated reverse zone, implying automatic configuration of the DNS server -- as the prefix may be dynamic. -- Pekka Savola "You each name yourselves king, yet the Netcore Oy kingdom bleeds." Systems. Networks. Security. -- George R.R. Martin: A Clash of Kings . dnsop resources:_____________________________________________________ web user interface: http://darkwing.uoregon.edu/~llynch/dnsop.html mhonarc archive: http://darkwing.uoregon.edu/~llynch/dnsop/index.html
