Yes, but this assumes you're talking about internet registrations. For internal DNS this is irrelevant.Technically, a TLD is a domain, but it does have specific semantics (e.g. can't be registered by anyone, does not name any organization's network, etc).
You can also enable to relay for anybody, namely for the root domain. It is your decision.Therefore it WOULD be a sane assumption that an MTA doesn't just enable relaying for a TLD.
www.de is a valid FQDN on the internet. It has an “A” record, so you can connect to it (it’s running a small web server, although it’s just redirecting elsewhere).de. Technically this is perfectly valid, and there is nothing in the RFCs that would disallow that. In practice it isn’t done because users would have to use the canonical (some call this “absolute”) form to access it, and most users don’t know how to do this. Hosts usually perform canonicalization, i.e. the resolver appends its own domain to names that are unqualified, i.e. names that don’t contain a dot. To write a TLD as a qualified (“absolute”) name, you have to append a dot. So, to access a hypothetical web server running on the TLD de, you would have to write https://de./ (note the dot). If you’re curious, you can try this yourself at home with BIND and a zone file for the example domain.That’s what sendmail does.That's all correct, and simply put, a domain is "qualified" as soon as it contains at least one dot. I'm just saying an option trying to derive your domain from your hostname (both technically FQDNs) by just stripping off everything up to the first dot is guesswork that only gives the correct result if you follow common practices. Maybe the best way for an MTA would be not to offer such an option at all and require explicit configuration of domains to relay for.
That's a root domain record. They're very popular nowadays. I would much rather have proper host records ("www" should be a host or an alias to a host, for example), but I appear to be very much in the minority.I have a server with name name.tld runningsendmailas MTA, cyrus-imap, apache, and other
software, without problems. But it would be not a surprise if some other software at some point make troubles.
The dot is not a domain. It's used to prevent origin substitution, both in zone files, and for the resolver, as Olli@ points out. I think origin substitution is also called "canonicalization", which is quite a typeful.Also the root domain (.) is a domain. The correct way to write a domain is with a dot at the end representing this root domain. This is very important when configuring DNS.
I used UW-IMAP for years, and was also very happy with it. Eventually my mailbox file got too big and started causing problems. I've just read that the author of UW-IMAP refused to add support for maildirs due a disagreement with DJB:BTW. It was much more complicated to get cyrus-imap thansendmailto work. The old
uw-imap worked out of the box, it was a nice solution for small personal servers, but unfortunately
is not mantained anymore.
I suspect this behavior was deliberately added when MX records were introduced. The standard before then was that mail would be sent to a particular host with an A record. This is from back in the day when having a mail account meant having a user account on some big Unix machine on campus. That approach works to this day if your domain does not have an MX record.Actually, for the most part, sendmail does not make a distinction between host names and domain names. It doesn’t have to, because technically it’s the same.
Actually, both is correct.The dot is not a domain. It's used to prevent origin substitution, both in zone files, and for the resolver, as Olli@ points out. I think origin substitution is also called "canonicalization", which is quite a typeful.
host -a . or drill . any that lists the delegation for the root name servers.Of course, that’s what the RFC requires. If there is no MX record, then the address record (A or AAAA) is used, with an implicit preference of 0.I suspect this behavior was deliberately added when MX records were introduced. The standard before then was that mail would be sent to a particular host with an A record. This is from back in the day when having a mail account meant having a user account on some big Unix machine on campus. That approach works to this day if your domain does not have an MX record.
Turns out there's another very special TLD under ".", "arpa".Technically, the dot is a domain, as hruodr mentioned. You can think of it as the zone that contains the delegations for com, net, org, info etc.
Indeed – I dismissed it earlier, having overlooked this paragraph:Yes, and this gets us back to the original question of this thread, because one of arpa’s subdomains –home.arpa– is meant to be used as the domain for private home networks. See RFC 8375.
Although this document makes specific reference to [RFC7788], it is
not intended that the use of 'home.arpa.' be restricted solely to
networks where HNCP is deployed. Rather, 'home.arpa.' is intended to
be the correct domain for uses like the one described for '.home' in
[RFC7788]: local name service in residential homenets.
I don't love it. The other subdomain for ARPA, "in-addr" is clearly meant to specify the Internet protocol class. Stuffing home under arpa seems to violate Section 2.1 of RFC 3172. I know it's only a recommendation, but still, it's messy.Yes, and this gets us back to the original question of this thread, because one of arpa’s subdomains –home.arpa– is meant to be used as the domain for private home networks. See RFC 8375.
tools.ietf.org
Don't forget ip6.arpa.The other subdomain for ARPA, "in-addr" is clearly meant to specify the Internet protocol class.
Indeed, it's a misuse. Looks like IETF wanted to reserve some TLD, but IANA didn't agree…Stuffing home under arpa seems to violate Section 2.1 of RFC 3172. I know it's only a recommendation, but still, it's messy.