Subject: DNSSEC warning
To: None <tech-security@netbsd.org>
From: Michael Richardson <mcr@sandelman.ottawa.on.ca>
List: tech-security
Date: 09/14/2001 13:40:44
-----BEGIN PGP SIGNED MESSAGE-----


  Initial experience is that having SIG records as part the DNS reply
confuses some stub resolvers, resulting in email not getting delivered.

  The receiving system looks up the SMTP From address and gets nothing,
so rejects the email.

  So far one system has been identified as a Solaris 6 box.
  If someone has access to such a box, or can get me access to one I have
some queries that I'd like to run.

]       ON HUMILITY: to err is human. To moo, bovine.           |  firewalls  [
]   Michael Richardson, Sandelman Software Works, Ottawa, ON    |net architect[
] mcr@sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy");  [

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: latin1
Comment: Processed by Mailcrypt 3.5.6, an Emacs/PGP interface

iQCVAwUBO6JAgoqHRg3pndX9AQFs5gQAlhfyd2FDTDu6/5z/svv4w2uRUQKgkj0J
AwZLuJyFBA+bFobDbb85VS5kaFpWOx4Ci98OW4+UZnO7L4VA12o+rkWEddh6slB8
MNFxclvZVPWgGvfuyPhaTt+LwCs5427szAA1XjNIx8rh1QG5wy1c1BefWlslDjvU
CbzxR7Ua4a4=
=y4I/
-----END PGP SIGNATURE-----