On Fri, 7 Feb 2003, Matthew Byng-Maddick wrote:
> On Fri, Feb 07, 2003 at 02:02:28PM -0500, Greg A. Woods wrote:
> > No, he really _MUST_ "rush" on the PTR records. Their correctness and
> > COMPLETENESS is critical for interaction with other servers using TCP
> > Wrappers style DNS consistency checks. CRITICAL. His connections will
> > be denied by some servers if his forward and reverse DNS is not 100%
> > consistent and complete.
>
> This is nothing other than complete rubbish. FUD. No TCP Wrappers
> implementation I have ever seen assumes what you've said. They all agree
I didn't look at rest of thread.
TCP Wrappers does offer a double lookup test to make sure the DNS is
correct. See hosts_access(5) for PARANOID.
Jeremy C. Reed
...................................................
BSD software, documentation, resources, news...
http://bsd.reedmedia.net/