ietf-asrg
[Top] [All Lists]

[Asrg] Problems with wildcards in combined IPv4 + IPv6 DNS blacklists

2011-05-26 17:33:54
http://tools.ietf.org/html/rfc5782#section-2.4

For both IPv4 and IPv6 addresses, the records end up as:

  [reversed IP].[zone]

There's a problem when you use wildcards on IPv4 addresses:

  *.0.0.2.zone.example.com

Matches IPv6 2.0.0.* (2.0.0.0/8), but it also matches IPv6 2000/12.
Any IPv6 address starting with "200", as many do.


I think the RFC should be changed to add something to the IPv6 records to
differentiate them, just about anything but an integer from 0-255, like:

  [reversed IP].v6.[zone]

Is there a problem with doing that?


Examples of this problem showing up can be found here:
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6484#c25

-- 
"We will be dead soon. Is this how we want to live?"
http://www.ChaosReigns.com
_______________________________________________
Asrg mailing list
Asrg(_at_)irtf(_dot_)org
http://www.irtf.org/mailman/listinfo/asrg