On Wed, 20 Sep 2000, Brian Kifiak wrote:
> > Yes, some broken resolver/mail system combinations will bounce "No
> > such domain" mail early rather than queuing "Host unreachable"
> > mail.
>
> Keyword: broken. We should fix broken software instead of kludging
> our setup to work around a flawed situation.
That's easy to say, but difficult for thousands of users to accept when it
comes to the fact that "everyone else got that last-minute contract
change."
> > It's normally not an extra cost- either exchanging secondaries
> > with another small company
>
> You want to trust your domain(s) to another company? Placing full
> trust in a system you can't assure is secure is definately a cost.
I've got news for you- most people already do since they likely don't have
their own root server. It's also easy to verify and/or contractually bind
(NPI) things. For small compaies, "You want to trust the physical server
to your cleaning crew?" is probably more of a likely issue.
>
> > or having your ISP host DNS
>
> They're only known for being slightly inflexible without $$$.
>
Then you've picked the wrong ISP. I'm pretty bad about DNS changes and
my expectations are very high, and I've never had a problem getting an ISP
to do the right thing.
> > Finally, it's always a good idea to plan for robust and scalable
> > infrastructure- that's one less thing to worry about if/when there
> > are problems- instead of waiting for a new authoritative server to
> > propogate
>
> Perhaps your most valid point. However, for any non-transient
> problems, all you have to do is remember to give sufficient time for
> the new records to propagate.
That's never helpful in an emergency.
> We're getting a bit off track for firewalls@, though. Reply-To:
> header set back to me.
Hopefully that problem will be fixed soon ;)
Paul
-----------------------------------------------------------------------------
Paul D. Robertson "My statements in this message are personal opinions
[EMAIL PROTECTED] which may have no basis whatsoever in fact."
PSB#9280
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
