warn of the sins of wildcard MX records

SCCS-vsn: usr.sbin/sendmail/src/READ_ME 8.97

diff --git a/usr/src/usr.sbin/sendmail/src/READ_ME b/usr/src/usr.sbin/sendmail/src/READ_ME
index f341a5d..e2ce45e 100644 (file)
--- a/usr/src/usr.sbin/sendmail/src/READ_ME
+++ b/usr/src/usr.sbin/sendmail/src/READ_ME
@@ -4,7 +4,7 @@
 #
 # %sccs.include.redist.sh%
 #
 #
 # %sccs.include.redist.sh%
 #

-#      @(#)READ_ME     8.96 (Berkeley) %G%
+#      @(#)READ_ME     8.97 (Berkeley) %G%

 #
 
 This directory contains the source files for sendmail.
 #
 
 This directory contains the source files for sendmail.


@@ -483,6 +483,13 @@ and linked with BIND 4.8 or vice versa, and it doesn't work.
 Unfortunately, it doesn't fail in an obvious way -- things just
 subtly don't work.
 
 Unfortunately, it doesn't fail in an obvious way -- things just
 subtly don't work.
 

+WILDCARD MX RECORDS ARE A BAD IDEA!  The only situation in which they
+work reliably is if you have two versions of DNS, one in the real world
+which has a wildcard pointing to your firewall, and a completely
+different version of the database internally that does not include
+wildcard MX records that match your domain.  ANYTHING ELSE WILL GIVE
+YOU HEADACHES!
+

 
 +-------------------------------------+
 | OPERATING SYSTEM AND COMPILE QUIRKS |
 
 +-------------------------------------+
 | OPERATING SYSTEM AND COMPILE QUIRKS |


@@ -1070,4 +1077,4 @@ version.c The version number and information about this
 
 Eric Allman
 
 
 Eric Allman
 

-(Version 8.96, last update %G% 12:37:34)
+(Version 8.97, last update %G% 18:11:35)