Search Again:

Re: Reverse DNS

From: Men & Mice Support
Date: Thursday, May 3, 2001
Time: 7:08:22 pm

At 1:36 PM -0500 5/3/01, Jim Grisham wrote:
>At 3:14 PM -0700 on 5/2/01, Global Homes Webmaster wrote:
>>On 05/02/01 at 13:51, Paul Didzerekis wrote:
>>
>>> Hello,
>>>
>>> We just switched upstream providers from a local company to UUNet and
>>> they were supposed to delegate the reverse DNS to us so that we can
>>> have control over it.
>>>
>>> What I need to know is:
>>>
>>> How to I check to see if the delegation has been done?
>>
>>Query down, starting from the root name servers and following the NS records
>>for the zone.
>>
>>> If it hasn't been done, what do I tell them to do to get this done?
>>>
>> > How do I set up things on our end?
>>>
>> > Our new IP Range is 63.95.200.0 - 63.95.200.127
>>
>>This is less than a full Class C block, so your ISP (UUNet) will need to do a
>>classless delegation to your name server. Exactly how you set it up
>>depends on
>>how they do the delegation (there's more than one way to skin this cat...).
>>
>>FWIW, it doesn't look like the delegation has been made yet.
>>Starting from the
>>root servers and following NS records, I hit a dead end at
>>
>>200.95.63.in-addr.arpa nameserver = auth40.ns.uu.net
>>200.95.63.in-addr.arpa nameserver = auth62.ns.uu.net
>>
>
>I couldn't find anything in my copy of DNS and Bind(3rd ed., it's
>three years old) regarding the delegation of classless reverse
>domains.

Take a look at RFC 2317. <http://www.faqs.org/rfcs/rfc2317.html>

>The IP address space to be delegated is 64.198.226.128/26, so what
>would need to be done on the current authority(server 1) for
>64.198.226.0/24. What needs to be done on the delegatee
>server(server 2)?

On server 1, CNAME records need to be created that look like this:

129.226.198.64.in-addr.arpa. CNAME <arbitrary name>
130.226.198.64.in-addr.arpa. CNAME <arbitrary name>

[...]

190.226.198.64.in-addr.arpa. CNAME <arbitrary name>

If the arbitrary names end in "226.198.64.in-addr.arpa.", then they
must be organized into a subzone of that zone, and the subzone must
be delegated to server 2.

A fully realized example setup:

129.226.198.64.in-addr.arpa. CNAME 129.rev.illinimedia.com.
130.226.198.64.in-addr.arpa. CNAME 130.rev.illinimedia.com.

[...]

190.226.198.64.in-addr.arpa. CNAME 190.rev.illinimedia.com.

On server 2 (your server, presumably), you'd create PTR records that
look like this:

<arbitrary name> PTR <canonical name>

So, for example, you might have records like this (assuming your ISP
follows the example above):

138.rev.illinimedia.com. PTR ns.illinimedia.com.

>Can this be done in QuickDNS on both servers?

Yes, assuming your ISP were using QuickDNS.

>Now, what if server 2 is the primary lookup DNS for a block of
>computers. Will DNS queries from those computers be able to see the
>parts of 64.198.226.0/24 that were not delegated? (Those would be
>64.198.226.0/25 and 64.198.226.192/26, right?)

Yes. That's the whole point of the classless subnet delegation - so
that the reverse records for the various subnets don't conflict with
each other.
____________________________________________________________________
Chris Buxton Men & Mice
cbuxton@menandmice.com We Make DNS Easy!



Messages In This Thread:



Return to Digital Point Solutions' Home Page