<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;">But the NS entry should also allow it :)<br id="lineBreakAtBeginningOfMessage"><div><br><blockquote type="cite"><div>On 22 Aug 2024, at 14:39, Colin Jack <colin@mainline.co.uk> wrote:</div><br class="Apple-interchange-newline"><div><meta charset="UTF-8"><div class="WordSection1" style="page: WordSection1; caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><div style="margin: 0cm; font-size: 12pt; font-family: Aptos, sans-serif;"><span style="font-size: 11pt;">Hi Taco,<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Aptos, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Aptos, sans-serif;"><span style="font-size: 11pt;">We already do for _dkim _dmarc etc. so that shouldn’t be a problem.<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Aptos, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Aptos, sans-serif;"><span style="font-size: 11pt;">Regards<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Aptos, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Aptos, sans-serif;"><span style="font-size: 11pt;">Colin<o:p></o:p></span></div><div style="margin: 0cm; font-size: 12pt; font-family: Aptos, sans-serif;"><span style="font-size: 11pt;"><o:p> </o:p></span></div><div style="border-width: 1pt medium medium; border-style: solid none none; border-color: rgb(181, 196, 223) currentcolor currentcolor; border-image: none; padding: 3pt 0cm 0cm;"><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><b><span style="font-family: Calibri, sans-serif;">From:<span class="Apple-converted-space"> </span></span></b><span style="font-family: Calibri, sans-serif;">Taco Scargo <taco@blueonyx.nl><br><b>Date:<span class="Apple-converted-space"> </span></b>Thursday 22 August 2024 at 12:52<br><b>To:<span class="Apple-converted-space"> </span></b>Michael Stauber <mstauber@blueonyx.it>, BlueOnyx General Mailing List <blueonyx@mail.blueonyx.it><br><b>Cc:<span class="Apple-converted-space"> </span></b>Colin Jack <colin@mainline.co.uk><br><b>Subject:<span class="Apple-converted-space"> </span></b>Re: [BlueOnyx:27199] Adding NS in include<o:p></o:p></span></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">Michael,<o:p></o:p></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">I did some research and we do need to allow underscored in the first part of a NS record, as it refers to a domain<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">Let me quote the standard, RFC 2181, section 11, "Name syntax":<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">The DNS itself places only one restriction on the particular labels that can be used to identify resource records. That one restriction relates to the length of the label and the full name. [...] Implementations of the DNS protocols must not place any restrictions on the labels that can be used. In particular, DNS servers must not refuse to serve a zone because it contains labels that might not be acceptable to some DNS client programs.<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">See also the original DNS specification, RFC 1034, section 3.5 "Preferred name syntax" but read it carefully.<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">Domains with underscores are very common in the wild. Check _jabber._tcp.gmail.com or _sip._udp.apnic.net.<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">For host names (or for URLs, which include a host name), then this is different, the relevant standard is RFC 1123, section 2.1 "Host Names and Numbers" which limits host names to letters-digits-hyphen.<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">Best regards,<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">Taco<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><br><br><o:p></o:p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" type="cite"><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">On 22 Aug 2024, at 13:16, Taco Scargo via Blueonyx <blueonyx@mail.blueonyx.it> wrote:<o:p></o:p></div></div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div><div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">Hi Colin,<o:p></o:p></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">In /var/named/chroot/var/named there should be a file of the specific domain with a .include extension<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">That’s where you would add a line, similar to (in case the domain is called<span class="Apple-converted-space"> </span><a href="http://example.com/" style="color: blue; text-decoration: underline;">example.com</a>):<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">_acme-challenge.example.com. IN NS XXXXXX.<o:p></o:p></div></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">What XXX should be you should have received as well.<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">It is however quite uncommon to use NS records for verification, generally this is done with TXT records.<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">I would advise you to ask the customer for additional information.<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">Best regards,<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">Taco Scargo<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">taco@blueonyx.nl<o:p></o:p></div></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><br><br><o:p></o:p></div><blockquote style="margin-top: 5pt; margin-bottom: 5pt;" type="cite"><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">On 22 Aug 2024, at 12:39, Colin Jack via Blueonyx <blueonyx@mail.blueonyx.it> wrote:<o:p></o:p></div></div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div><div><div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">Good morning.<br><br>Some guidance please.<br><br>We have a customer using a third party host for their website but we hold the DNS.<br>They have requested the following NS record to be added.<br><br>NS _acme-challenge domain.tld<br><br>This can't be done from the GUI so I will need to add to the include file but not certain on the format.<br>I don't want to mess it up!<br><br>Please can someone tell me what I need to do?<br><br>Many thanks<br><br>Colin<br><br><br>_______________________________________________<br>Blueonyx mailing list<br>Blueonyx@mail.blueonyx.it<br>http://mail.blueonyx.it/mailman/listinfo/blueonyx<o:p></o:p></div></div></div></blockquote></div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;"><o:p> </o:p></div></div></div><div style="margin: 0cm 0cm 0cm 36pt; font-size: 12pt; font-family: Aptos, sans-serif;">_______________________________________________<br>Blueonyx mailing list<br>Blueonyx@mail.blueonyx.it<br>http://mail.blueonyx.it/mailman/listinfo/blueonyx</div></div></blockquote></div></div></div></div></blockquote></div><br></body></html>