Re: [sitefinder-tech-discuss] Pseudo code please

[Andrew Newton <anewton@verisignlabs.com>]

It answers #2.  I don't know why you are doing #1.

It could answer #3 if done before the MX and A checks.  Also note, that 
if VeriSign deployed a wildcard MX according to the details in 
yesterdays SECSAC meeting, then #3 would be solved by the 2821 behaviour.

-andy

Kee Hinckley wrote:
> At 12:47 PM -0400 10/16/03, Andrew Newton wrote:
>
> > From a Python script of mine:
> >
> > import dns.message
> > import dns.query
> >
> > ....
> >
> > def testdomain( domain, hdr ):
> >   query = dns.message.make_query( domain, dns.rdatatype.NS )
> >   message = dns.query.tcp( query, '192.5.6.30' )
> >   if len( message.answer ) == 0:
> >     markInvalid( hdr )
> >   return
>
>
> That's not pseudo-code, and it doesn't specifically answer any question 
> except #2.  So I'll try and do a little experimentation and guess what 
> you are saying here.  (What the hell, after all you're going to 
> reimburse me for the work, right?)
>
> I think you're saying that prior to doing any A or MX query, I should 
> first take the host name and reduce it to just the domain name.  Then I 
> should do an NS query on the domain.  If the results are empty, then I 
> know it's a wildcard.  If there is a result, then I can trust the 
> results of any subsequent queries on the host/domain name to be accurate.
>
> Is that correct?
>
> > Kee Hinckley wrote:
> >
> > > I'd like to see some pseudo code.
> > >
> > > 1. Given a host name in .com/.net, determine whether the host really 
> > > exists.
> > > 2. Given a domain name in .com/.net, determine whether the domain 
> > > really exists, or whether it has been configured to *look* like a 
> > > Verisign wildcard domain.
> > > 3. Given a host/domain, determine whether one should be able to send 
> > > mail to it.



----------------------------------------------------------------
To subscribe or unsubscribe from this elist use the subscription
manager: <http://lists.elistx.com/unsubscribe>