diff --git a/FAQ/freebsd-faq.sgml b/FAQ/freebsd-faq.sgml index e1e26815c3..1343477096 100644 --- a/FAQ/freebsd-faq.sgml +++ b/FAQ/freebsd-faq.sgml @@ -4,7 +4,7 @@
+ The current version of BIND that ships with FreeBSD + does no longer provide default abbreviations for non-fully + qualified domain names other than the domain you are in. + So an unqualified host mumble must either be found + as mumble.foo.bar.edu, or it will be searched for + in the root domain. +
+ This is different from the previous behaviour, where the + search did continue across mumble.bar.edu, and + mumble.edu. Have a look at RFC 1535 for why this + has been considered bad practice and even a security hole. +
+ As a good workaround, you can place the line +
+search foo.bar.edu bar.edu +
+ instead of the previous + +
+domain foo.bar.edu +
+ into your /etc/resolv.conf. However, make sure + that the search order does not go beyond the ``boundary + between local and public administration'', as RFC 1535 + calls ist. + +