[Freeipa-devel] [PATCH] 057 Validate MX records

[Jakub Hrozek]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

https://fedorahosted.org/freeipa/ticket/967

I'm wondering whether to extend the patch - if the mail server name does
not end with a dot, BIND treats it as relative to the zone.

So if you do:
ipa dnsrecord-add example.com @ --mx-rec="10 mail.example.com"

dig would then return mail.example.com.example.com

The correct way of adding it is (note the trailing dot):
ipa dnsrecord-add example.com @ --mx-rec="10 mail.example.com."

This is in line with how nsupdate works, so should we just document it?
A smarter way might be to check if the hostname ends with the zone name
and append a dot, but I'm not sure if that perhaps /too/ smart..
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAk1aXtcACgkQHsardTLnvCXY0wCgtkc0kBdPorCgd9oyh4AazDy0
8hoAn0vgX5xQYJv2D9gjjTgnu0mgUMbp
=nzLT
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jhrozek-freeipa-057-mx-record.patch
Type: text/x-patch
Size: 8586 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20110215/47496eff/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: jhrozek-freeipa-057-mx-record.patch.sig
Type: application/pgp-signature
Size: 72 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20110215/47496eff/attachment.sig>