Re: [cobalt-users] RAQ2 - Still Can't send mail to AOL HELP!

[Jeff Lasman <jblists@xxxxxxxxxxxxx>]

"E.B. Dreger" wrote:

> 
> I think I phrased my post badly.  What I meant to say is that I
> wish _registrars_ would _check_ if the listed NSes are indeed
> authoritative _before_ processing the domain registration.

Now that's a great point, BUT it has it's problems as well.

How would you check to see if they're authoritative if they don't exist
yet.  What if you're settting up your network and list your own
nameservers so you can get the domain before you actually build the
server?

Many country-specific top-level domains DO require it, and DO check. 
We've had problems setting up systems because of that.

True, the network solutions default "Running" statement is meaningless
the name-server is NOT checked.

> It's less of an issue now that domains are prepaid-only, but it's
> still annoying that someone can arbitrarily register using your
> NSes without your knowledge.

One way to partially solve the problem:  For your public-pointing
nameservers, don't allow recursive lookups.  That way no one can use you
as a secondary for non-authoritative replies, anyway.  And you can get a
list from Network Solutions of all domains registered with them using
your nameserver, if registered with them.  Since a lot of people still
use Network Solutions, our nameserver domain is registered with them,
and we do peruse the list occasionally.

> Sort of like I got a spam complaint early this morning when some
> spammer used a consulting client's customer's domain in the SMTP
> HELO.  Originated elsewhere, relayed elsewhere, advertising a
> spamvertised site hosted elsewhere... but that bogus SMTP HELO
> put me on the complaint list. *frown*

Yeah, I caught a partner of mine spamming that way.  He's no longer my
partner; he ended up buying me out.  I did well <smile>.

> Hmmmm.  Good to know that they're more responsive about this now.
> Of course, we've moved almost all domains away from NSI, so it's
> a bit moot.

Do the other registrars let you kill a nameserver if there are
unauthorized domains pointing to it?  Do they let you delist a company
from a nameserver at all?  NSI still does.

-- 
Jeff Lasman <jblists@xxxxxxxxxxxxx>
Linux and Cobalt/Sun/RaQ Consulting
nobaloney.net
P. O. Box 52672, Riverside, CA  92517
voice: (909) 778-9980  *  fax: (702) 548-9484