stream-dns
stream-dns copied to clipboard
Prohibit PTR record which doesnt point to a primary name
Overview
According to rfc 1034, domain names in RRs which point at another name (PTR record) should always point at the primary name and not the alias. This avoids extra indirections in accessing information.
Example:
USC-ISIC.ARPA IN CNAME C.ISI.EDU
C.ISI.EDU IN A 10.0.0.52
; point the .ARPA domain name to the primary name and not his alias
52.0.0.10.IN-ADDR.ARPA IN PTR C.ISI.EDU
What to do
- We should verify than a PTR record received point to a primary name and not a CNAME
- Log an error and reject the record if it's the case