Re: [Ext] Re: Redirect only second and third level domains

2017-02-28 Thread Andrea Gabellini
Hi, thank you all for the replies. "Don't do it" was also my first thought. Andrea Il 24/02/2017 21:19, /dev/rob0 ha scritto: > On Fri, Feb 24, 2017 at 02:05:54PM -0500, Warren Kumari wrote: >> -- >> I don't think the execution is relevant when it was obviously >> a bad idea in the first

Re: [Ext] Re: Redirect only second and third level domains

2017-02-24 Thread /dev/rob0
On Fri, Feb 24, 2017 at 02:05:54PM -0500, Warren Kumari wrote: > -- > I don't think the execution is relevant when it was obviously > a bad idea in the first place. > This is like putting rabid weasels in your pants, and later > expressing regret at having chosen those particular rabid > weasels

Re: [Ext] Re: Redirect only second and third level domains

2017-02-24 Thread Warren Kumari
On Fri, Feb 24, 2017 at 1:12 PM, Edward Lewis wrote: > On 2/24/17, 03:42, "bind-users on behalf of Andrea Gabellini" wrote: > >>the server is a resolver for about 20K clients. My goal is to supply a >>courtesy page if a domain is not found. For every domain. > > No

Re: [Ext] Re: Redirect only second and third level domains

2017-02-24 Thread Edward Lewis
On 2/24/17, 03:42, "bind-users on behalf of Andrea Gabellini" wrote: >the server is a resolver for about 20K clients. My goal is to supply a >courtesy page if a domain is not found. For every domain. No approach relying on wildcards will work because of the way wildcards "work."

Re: Redirect only second and third level domains

2017-02-24 Thread Barry Margolin
In article , Andrea Gabellini wrote: > Hi, > > the server is a resolver for about 20K clients. My goal is to supply a > courtesy page if a domain is not found. For every domain. But a wildcard in the

Re: Redirect only second and third level domains

2017-02-24 Thread Warren Kumari
Yeah, what you are describing is NXDomain rewriting -- it turns out to be a really bad idea. Here are some initial documents decribing why: https://www.icann.org/en/system/files/files/sac-032-en.pdf -- ICANN Security and Stability Advisory Committee SAC 032 Preliminary Report on DNS Response

Re: Redirect only second and third level domains

2017-02-24 Thread /dev/rob0
> Il 23/02/2017 20:38, Warren Kumari ha scritto: > > What are you actually trying t odo? On Fri, Feb 24, 2017 at 09:42:17AM +0100, Andrea Gabellini wrote: > the server is a resolver for about 20K clients. My goal is to > supply a courtesy page if a domain is not found. For every domain. Ugh.

Re: Redirect only second and third level domains

2017-02-24 Thread Reindl Harald
Am 24.02.2017 um 09:42 schrieb Andrea Gabellini: the server is a resolver for about 20K clients. My goal is to supply a courtesy page if a domain is not found. For every domain. for the sake of other admins and their services which may rely on correct working NXDOMAIN please don't do that

Re: Redirect only second and third level domains

2017-02-24 Thread Andrea Gabellini
Hi, the server is a resolver for about 20K clients. My goal is to supply a courtesy page if a domain is not found. For every domain. A query for abc.example.com or example.com (and these do not exist) has to receive the address of the courtesy web server. A query for xyz.abc.example.com (and

Re: Redirect only second and third level domains

2017-02-23 Thread Warren Kumari
On Thu, Feb 23, 2017 at 7:21 AM, Andrea Gabellini wrote: > Hi, > > I would like to redirect the NXDOMAIN responses to a courtesy page but > only for second and third level domains. I mean something like: > > *.*. IN A 1.2.3.4 > *.*.*. IN A 1.2.3.4 > > that

Redirect only second and third level domains

2017-02-23 Thread Andrea Gabellini
Hi, I would like to redirect the NXDOMAIN responses to a courtesy page but only for second and third level domains. I mean something like: *.*. IN A 1.2.3.4 *.*.*. IN A 1.2.3.4 that obviously doesn't work. Is there a solution to do it? Actually my configuration is: zone "." in { type