Re: New cvs setup?

["Matt Armstrong" <matt+dated+1007070401.afc757@lickey.com>]

Josh Huber <huber@alum.wpi.edu> writes:

> prj@po.cwru.edu (Paul Jarc) writes:
>
>> You do have a reverse-lookupable name for that address
>> (66.51.210.228.dslextreme.com), but that name has no address.  But
>> unless the server is treating you differently than most other
>> clients (i.e., it's giving you special permissions), it oughtn't
>> care about these DNS records.  If it does care, that's a
>> misconfiguration.
>
> This is the problem, maybe.
>
> Perhaps cvs.gnus.org has
>
> ALL: PARANOID
>
> in hosts.deny?
>
> for example, my IP address at home is 65.96.250.128.  Surprisingly
> (we're talking about ATT broadband here), this address resolves to a
> host, and that host resolves to another IP address.  For me they
> happen to be the same addresses:
>
> 65.96.250.128 -> h000094c5efff.ne.mediaone.net -> 65.96.250.128
>
> I think ALL: PARANOID only requires that
>
> 1) your IP resolves to a hostname
> 2) that hostname resolves to ANY ip address.

"ALL: PARANOID" requires that the IP address have a PTR record to a
hostname that resolves to the same IP address.


> of course, this mostly causes problems, and adds very little
> security benefits...

True.  Though the Internet would be a better place if everybody had
their DNS set up properly.

-- 
matt