Search Again:

Re: Class C reverse delegation

From: Len Conrad
Date: Tuesday, March 12, 2002
Time: 9:51:07 am


>I have a question that I can't seem to find the answer to in previous
>discussions. I/We own the class C of 64.80.175.0 and have requested
>delegation of the reverse DNS for this subnet. Paetec.net (ISP) has
>granted us this delegation

maybe administratively, but not technically, because the delegation is with
their NS's:

# dig -x 64.80.175

; <<>> DiG 8.3 <<>> -x
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 2, ADDITIONAL: 2
;; QUERY SECTION:
;; 175.80.64.in-addr.arpa, type = ANY, class = IN

;; ANSWER SECTION:
175.80.64.in-addr.arpa. 1D IN NS ns1.paetec.net.
175.80.64.in-addr.arpa. 1D IN NS ns2.paetec.net.
175.80.64.in-addr.arpa. 1D IN SOA ns1.paetec.net. dns.paetec.net. (
2002021300 ; serial
8H ; refresh
4H ; retry
1W ; expiry
1D ) ; minimum


;; AUTHORITY SECTION:
175.80.64.in-addr.arpa. 1D IN NS ns1.paetec.net.
175.80.64.in-addr.arpa. 1D IN NS ns2.paetec.net.

;; ADDITIONAL SECTION:
ns1.paetec.net. 1D IN A 64.80.255.250
ns2.paetec.net. 1D IN A 64.80.255.251

but individual ip's are with ecornell NS's:

mx3# dig -x 64.80.175.5

; <<>> DiG 8.3 <<>> -x
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0
;; QUERY SECTION:
;; 5.175.80.64.in-addr.arpa, type = ANY, class = IN

;; ANSWER SECTION:
5.175.80.64.in-addr.arpa. 23h58m36s IN NS ns1.ecornell.com.
5.175.80.64.in-addr.arpa. 23h58m36s IN NS ns2.ecornell.com.

;; AUTHORITY SECTION:
5.175.80.64.in-addr.arpa. 23h58m36s IN NS ns1.ecornell.com.
5.175.80.64.in-addr.arpa. 23h58m36s IN NS ns2.ecornell.com

( btw, you have two NS's at same ip address? )

If you look at how our class C is delegated, the "network" octet is
delegated to our NS's, unlike yours above:

# dig -x 212.73.210

; <<>> DiG 8.3 <<>> -x
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 4, ADDITIONAL: 4
;; QUERY SECTION:
;; 210.73.212.in-addr.arpa, type = ANY, class = IN

;; ANSWER SECTION:
210.73.212.in-addr.arpa. 6h53m48s IN NS ns1.meiway.com.
210.73.212.in-addr.arpa. 6h53m48s IN NS ns2.meiway.com.
210.73.212.in-addr.arpa. 6h53m48s IN NS as1.meiway.com.
210.73.212.in-addr.arpa. 6h53m48s IN NS ms1.meiway.com.

;; AUTHORITY SECTION:
210.73.212.in-addr.arpa. 6h53m48s IN NS ns1.meiway.com.
210.73.212.in-addr.arpa. 6h53m48s IN NS ns2.meiway.com.
210.73.212.in-addr.arpa. 6h53m48s IN NS as1.meiway.com.
210.73.212.in-addr.arpa. 6h53m48s IN NS ms1.meiway.com.

;; ADDITIONAL SECTION:
ns1.meiway.com. 1d6h21m49s IN A 212.73.210.69
ns2.meiway.com. 1d6h21m49s IN A 212.73.210.72
as1.meiway.com. 1d6h21m49s IN A 212.73.210.81
ms1.meiway.com. 1d6h21m50s IN A 212.73.210.73

This may not be a big problem for you, since your NS's are answering
reverse queries at the ip level, but clearly not at the Class C level.

>; <<>> DiG 2.1 <<>> @maggie.menandmice.is 19.175.80.64.in-addr.arpa NS
>; (1 server found)
>;; res options: init recurs defnam dnsrch
>;; got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
>;; flags: qr rd ra; Ques: 1, Ans: 2, Auth: 0, Addit: 1
>;; QUESTIONS:
>;; 19.175.80.64.in-addr.arpa, type = NS, class = IN
>;; ANSWERS:
>19.175.80.64.in-addr.arpa. 81516 NS ns1.ecornell.com.
>19.175.80.64.in-addr.arpa. 81516 NS ns2.ecornell.com.

you ask for NS records and you got them, from your NS's, where's the problem?

>My question is this: Shouldn't ns1.ecornell.com and ns2.ecornell.com be
>listed as the name servers for 175.80.64.in-addr.arpa if we've supposedly
>been delegated responsibility for reverse DNS for that class C?

yes, they should. see my examples of our Class C's of 212.73.210 and
212.73.211. I think you have a basis for taking this up with paetec.

Len


___________________________________________________________________

Men & Mice: QuickDNS - DNS Expert - DNS Training - DNS Consulting
DNS Classes: Maidenhead, 01/21-23/02, Frankfurt 02/13-14/02
http://www.menandmice.com/8000/8100_course_schedule.html




Messages In This Thread:



Return to Digital Point Solutions' Home Page