From: Eric Allman <eric@ucbvax.Berkeley.EDU>
Date: Tue, 20 Jun 1995 09:11:35 +0000 (-0800)
Subject: warn of the sins of wildcard MX records
X-Git-Url: https://git.subgeniuskitty.com/unix-history/.git/commitdiff_plain/f4554bfa6cb66575fc1e23f1ce095aa2136c07c1

warn of the sins of wildcard MX records

SCCS-vsn: usr.sbin/sendmail/src/READ_ME 8.97
---

diff --git a/usr/src/usr.sbin/sendmail/src/READ_ME b/usr/src/usr.sbin/sendmail/src/READ_ME
index f341a5df4b..e2ce45eb02 100644
--- a/usr/src/usr.sbin/sendmail/src/READ_ME
+++ b/usr/src/usr.sbin/sendmail/src/READ_ME
@@ -4,7 +4,7 @@
 #
 # %sccs.include.redist.sh%
 #
-#	@(#)READ_ME	8.96 (Berkeley) %G%
+#	@(#)READ_ME	8.97 (Berkeley) %G%
 #
 
 This directory contains the source files for sendmail.
@@ -483,6 +483,13 @@ and linked with BIND 4.8 or vice versa, and it doesn't work.
 Unfortunately, it doesn't fail in an obvious way -- things just
 subtly don't work.
 
+WILDCARD MX RECORDS ARE A BAD IDEA!  The only situation in which they
+work reliably is if you have two versions of DNS, one in the real world
+which has a wildcard pointing to your firewall, and a completely
+different version of the database internally that does not include
+wildcard MX records that match your domain.  ANYTHING ELSE WILL GIVE
+YOU HEADACHES!
+
 
 +-------------------------------------+
 | OPERATING SYSTEM AND COMPILE QUIRKS |
@@ -1070,4 +1077,4 @@ version.c	The version number and information about this
 
 Eric Allman
 
-(Version 8.96, last update %G% 12:37:34)
+(Version 8.97, last update %G% 18:11:35)