From owner-freebsd-isp  Mon Aug 18 09:32:43 1997
Return-Path: <owner-freebsd-isp>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id JAA00987
          for isp-outgoing; Mon, 18 Aug 1997 09:32:43 -0700 (PDT)
Received: from smtp1.ts.kiev.ua (viking.ts.kiev.ua [193.124.229.195])
          by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id JAA00976
          for <isp@FreeBSD.ORG>; Mon, 18 Aug 1997 09:32:37 -0700 (PDT)
Received: from aviion.ts.kiev.ua by smtp1.ts.kiev.ua with SMTP id TAA16496;
  (8.8.3/zah/2.1) Mon, 18 Aug 1997 19:27:58 +0300 (EET DST)
Received: from nbki.ipri.kiev.ua by aviion.ts.kiev.ua with ESMTP id PAA02490;
  (8.6.11/zah/2.1) Mon, 18 Aug 1997 15:49:36 GMT
Received: from cki.ipri.kiev.ua by nbki.ipri.kiev.ua with ESMTP id RAA10292;
  (8.6.9/zah/1.1) Mon, 18 Aug 1997 17:01:59 +0100
Received: from localhost (rssh@localhost) by cki.ipri.kiev.ua (8.7.6/8.7.3) with SMTP id QAA18680; Mon, 18 Aug 1997 16:56:43 +0300 (EET DST)
Date: Mon, 18 Aug 1997 16:56:43 +0300 (EET DST)
From: Ruslan Shevchenko <rssh@cki.ipri.kiev.ua>
To: Eddie Fry <eddie@eaznet.com>
cc: Kevin Brown <kbrown@primelink.com>, Eddie Fry <eddie@Wicked.eaznet.com>,
        isp@FreeBSD.ORG
Subject: Re: reverse DNS
In-Reply-To: <33F3A8ED.F66C28F6@eaznet.com>
Message-ID: <Pine.BSF.3.95.970818165517.18651C-100000@cki.ipri.kiev.ua>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-isp@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

On Thu, 14 Aug 1997, Eddie Fry wrote:

> Kevin Brown wrote:
> 
> > At 04:32 PM 8/14/97 -0700, Eddie Fry wrote:
> > >
> > >If I go to a site with reverse DNS
> > authentication from any server listed
> > in my in-addr.arpa file, no problem.  The
> > problem occurs when a dial-in
> > user or a Win 95 machine on my network (but not
> > listed in my named files)
> > tries to access one of these sites.
> 
> > Without a record in your in-addr.arpa.db, these
> > hosts will not resolve
> > reverse. So to answer your question quickly...
> > Yes.  Do unto one, as you
> > would the other.
> >
> 
> So, my dial-in users CANNOT be reverse
> authenticated unless I give each of them their own
> IP address?  Kevin, please don't take this wrong.
> That doesn't seem right to me.  You can't tell me
> that anyone that uses server assigned IP addresses
> is unable to, for example, download the US version
> of Netscape???!?!?!?!?!?

I use hab1.ipri,kiev.ua , ... habN.ipri.kiev.ua for area of dynamic
addresses, and all work.

 But better have proxy, with DNS, and do all requests throught proxy. 

> 
> Eddie
> 
> > ;
> > ; domain.com.db
> > ;
> > blah
> > ;
> > first-host      IN      A       10.10.1.6
> >
> > then;
> >
> > ;
> > ; 1.10.10.in-addr.arpa.db
> > ;
> > blah
> > ;
> >
> > 6       IN      PTR     first-host
> >
> > //////////////////////////////////
> > ///////////////////////////////////
> > Kevin Brown
> > ---------->(kbrown@primelink.com)
> > -- email ->(darkstar@sockets.net)
> > ---------->(darkstar@frequency.net)
> >
> > Huber and Associates    (www.primelink.com)
> > Frequency Networks      (www.frequency.net)
> > ///////////////////////////////////////////
> > //////////////////////////
> > --------------------------
> > ---------------------------------------
> > Pursuate to US Code, Title 47, Chapter 5,
> > Subchapter II, Sec. 227,
> > any and all nonsolicited commercial E-mail sent
> > to this address is
> > subject to a download and archival fee in the
> > amount of $500 US.
> > Emailing denotes acceptance of these terms.
> > -------------------------------------------
> > ----------------------
> 
> 
> 
> 
> 
> 



   @=                                        mailto:rssh@cki.ipri.kiev.ua
    //RSSH                                   http://www.ipri.kiev.ua/~rssh