This was brought to my attention by a friend. It looks like
ns1.domainmonger.com and ns2.domainmonger.com are doing wildcard A records for
all zones, including those that already exist.
If you go to their site and try to register a domain, it properly shows if the
domain exists or not.
I'm trying to figure out what the reasoning is behind this.
My friend alo pointed out this CERT alert, but I'm not sure how it relates:
http://www.kb.cert.org/vuls/id/109475
Rick
Some of the more pedantic registries require that nameservers for a
new domain reg be up and available. In theory they are also supposed
to answer auth for the new domain being registered, but I am not sure
how many actually check for an SOA.
Afternic used to wildcard NS records for that reason, so the practice
isn't anything new.
In theory this doesnt break anything, since the nameservers in
question aren't providing recursive service to anyone. Any questions
they see are the result of a followed delegation. So I don't see why
this would cause problems anywhere.
matto
just me <matt@snark.net> writes:
In theory this doesnt break anything, since the nameservers in
question aren't providing recursive service to anyone. Any questions
they see are the result of a followed delegation. So I don't see why
this would cause problems anywhere.
I'd sure hate to be the poor fellow having a zone being served from
those nameservers when the inevitable configuration error causes the
zone to get dropped on the floor (for instance an accidental removal
from named.conf). NXDOMAIN or SERVFAIL sure beats a wildcard match
going to the wrong place.
---Rob
just me <matt@snark.net> writes:
> In theory this doesnt break anything, since the nameservers in
> question aren't providing recursive service to anyone. Any questions
> they see are the result of a followed delegation. So I don't see why
> this would cause problems anywhere.
I'd sure hate to be the poor fellow having a zone being served from
those nameservers when the inevitable configuration error causes the
zone to get dropped on the floor (for instance an accidental removal
from named.conf). NXDOMAIN or SERVFAIL sure beats a wildcard match
going to the wrong place.
---Rob
I think (don't hold me to this, I might be wrong) the trick, when
you're a registrar, is to not lose domains?
matto
--mghali@snark.net------------------------------------------<darwin><
Flowers on the razor wire/I know you're here/We are few/And far
between/I was thinking about her skin/Love is a many splintered
thing/Don't be afraid now/Just walk on in. #include <disclaim.h>