Re: [members-discuss] New (silent) reverse dns checks

Jonas Frey wrote:

we just found out that RIPE seems to have silently integrated new checks for reverse delegation of zones. Its no longer possible to add or even change a zone if the nameservers used by them are open recursors. The update will fail.

Indeed? Really? Wow.

Yes - open recursors are (sometimes) bad. But there are legitimate reasons to run them (freedom of speech, filtered resources etc). Once properly configured (i.e. querys rate limited) they wont pose a threat.

We strongly agree. Don't blacklist open resolvers RIPE! -- nemox.net Rudolf E. Steiner r.steiner@nemox.net http://nemox.net/pdat/res/