RE: [FW1] strange problem resolving addresses

[Rick Murphy <rmurphy@mitretek.org>]

At 01:27 PM 4/22/99 -0600, Paquette, Trevor wrote:
>
>This should now be fixed. I just queried the root server directly and they
>are no longer providing the reverse to the RFC-1918 space.

... for now. Expect them to start resolving them again with a
'more descriptive' message. If you had problems with the 'read-rfc1918'
setup, you have a problem and really should read RFC 1918. :-)
<http://info.internet.isi.edu:80/in-notes/rfc/files/rfc1918.txt>
specifically, the part that reads:

"If an enterprise uses the private address space, or a mix of private
and public address spaces, then DNS clients outside of the enterprise
should not see addresses in the private address space used by the
enterprise, since these addresses would be ambiguous.  One way to
ensure this is to run two authority servers for each DNS zone
containing both publically and privately addressed hosts."

You are hammering the ISI web server if your internal addresses reverse
resolve to blackhole.isi.edu.  It is in your own best interest to fix this -
the performance should be significantly higher.
	-Rick



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================