zonemaster / zonemaster

The Zonemaster Project
Other
435 stars 71 forks source link

Why is the lack of PTR for NS addresses WARNed and then actually checked? (relates to Address02 and Address03) #946

Open jpmens opened 3 years ago

jpmens commented 3 years ago

Zonemaster currently labels missing PTR records for addresses of NS RRsets as a WARNING:

rabbit-7896

and as NOTICE if PTR records for the NS RRset exist but their names don't match:

rabbit-7897

ADDRESS02 specifies that a Reverse DNS entry should exist for name server IP address, and the reason specified is

Some anti-spam techniques use reverse DNS lookup to allow incoming traffic

While the reason is accurate for incoming SMTP mail, I do not see how this has anything to do with NS records.

Likewise, in ADDRESS03 which tests whether reverse DNS entry matches name server name, a similar objective is given. Here too, I do not see how this affects name server addresses.

Would it be reasonable to suggest that these tests at best product INFO instead of WARNING?

matsduf commented 3 years ago

Thank you for pointing this out. We will review the test cases and the default levels of the messages.