Am 2022-03-24 14:34, schrieb lejeczek via FreeIPA-users:
On 22/03/2022 18:14, Rainer Duffner wrote:
>
>
>> Am 22.03.2022 um 18:07 schrieb lejeczek via FreeIPA-users
>> <freeipa-users(a)lists.fedorahosted.org>:
>>
>> p.s. is the world ready for such hardened IPA/dns? I mean..
>>
ifpaypal.com <
http://paypal.com/>cannot keep up..
>
>
> In a production-setup, I would not rely on IPA-DNS for my general
> resolver-tasks.
>
> I’d just forward it the necessary queries and let the actual resolvers
> do their work.
>
>
Why? Is it too much of a job for IPA DNS?
thanks, L
It's just that I would not want to mess too much with IPAs BIND
configuration.
My actual resolvers would e.g. have RPZ zones configured and likely
other internal domains.