|
|
 |  |
Re: Class C reverse delegationFrom: Len Conrad Date: Tuesday, March 12, 2002
Time: 9:51:07 am
>I have a question that I can't seem to find the answer to in previous
>discussions. I/We own the class C of 64.80.175.0 and have requested
>delegation of the reverse DNS for this subnet. Paetec.net (ISP) has
>granted us this delegation
maybe administratively, but not technically, because the delegation is with
their NS's:
# dig -x 64.80.175
; <<>> DiG 8.3 <<>> -x
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 2, ADDITIONAL: 2
;; QUERY SECTION:
;; 175.80.64.in-addr.arpa, type = ANY, class = IN
;; ANSWER SECTION:
175.80.64.in-addr.arpa. 1D IN NS ns1.paetec.net.
175.80.64.in-addr.arpa. 1D IN NS ns2.paetec.net.
175.80.64.in-addr.arpa. 1D IN SOA ns1.paetec.net. dns.paetec.net. (
2002021300 ; serial
8H ; refresh
4H ; retry
1W ; expiry
1D ) ; minimum
;; AUTHORITY SECTION:
175.80.64.in-addr.arpa. 1D IN NS ns1.paetec.net.
175.80.64.in-addr.arpa. 1D IN NS ns2.paetec.net.
;; ADDITIONAL SECTION:
ns1.paetec.net. 1D IN A 64.80.255.250
ns2.paetec.net. 1D IN A 64.80.255.251
but individual ip's are with ecornell NS's:
mx3# dig -x 64.80.175.5
; <<>> DiG 8.3 <<>> -x
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 0
;; QUERY SECTION:
;; 5.175.80.64.in-addr.arpa, type = ANY, class = IN
;; ANSWER SECTION:
5.175.80.64.in-addr.arpa. 23h58m36s IN NS ns1.ecornell.com.
5.175.80.64.in-addr.arpa. 23h58m36s IN NS ns2.ecornell.com.
;; AUTHORITY SECTION:
5.175.80.64.in-addr.arpa. 23h58m36s IN NS ns1.ecornell.com.
5.175.80.64.in-addr.arpa. 23h58m36s IN NS ns2.ecornell.com
( btw, you have two NS's at same ip address? )
If you look at how our class C is delegated, the "network" octet is
delegated to our NS's, unlike yours above:
# dig -x 212.73.210
; <<>> DiG 8.3 <<>> -x
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 4, ADDITIONAL: 4
;; QUERY SECTION:
;; 210.73.212.in-addr.arpa, type = ANY, class = IN
;; ANSWER SECTION:
210.73.212.in-addr.arpa. 6h53m48s IN NS ns1.meiway.com.
210.73.212.in-addr.arpa. 6h53m48s IN NS ns2.meiway.com.
210.73.212.in-addr.arpa. 6h53m48s IN NS as1.meiway.com.
210.73.212.in-addr.arpa. 6h53m48s IN NS ms1.meiway.com.
;; AUTHORITY SECTION:
210.73.212.in-addr.arpa. 6h53m48s IN NS ns1.meiway.com.
210.73.212.in-addr.arpa. 6h53m48s IN NS ns2.meiway.com.
210.73.212.in-addr.arpa. 6h53m48s IN NS as1.meiway.com.
210.73.212.in-addr.arpa. 6h53m48s IN NS ms1.meiway.com.
;; ADDITIONAL SECTION:
ns1.meiway.com. 1d6h21m49s IN A 212.73.210.69
ns2.meiway.com. 1d6h21m49s IN A 212.73.210.72
as1.meiway.com. 1d6h21m49s IN A 212.73.210.81
ms1.meiway.com. 1d6h21m50s IN A 212.73.210.73
This may not be a big problem for you, since your NS's are answering
reverse queries at the ip level, but clearly not at the Class C level.
>; <<>> DiG 2.1 <<>> @maggie.menandmice.is 19.175.80.64.in-addr.arpa NS
>; (1 server found)
>;; res options: init recurs defnam dnsrch
>;; got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10
>;; flags: qr rd ra; Ques: 1, Ans: 2, Auth: 0, Addit: 1
>;; QUESTIONS:
>;; 19.175.80.64.in-addr.arpa, type = NS, class = IN
>;; ANSWERS:
>19.175.80.64.in-addr.arpa. 81516 NS ns1.ecornell.com.
>19.175.80.64.in-addr.arpa. 81516 NS ns2.ecornell.com.
you ask for NS records and you got them, from your NS's, where's the problem?
>My question is this: Shouldn't ns1.ecornell.com and ns2.ecornell.com be
>listed as the name servers for 175.80.64.in-addr.arpa if we've supposedly
>been delegated responsibility for reverse DNS for that class C?
yes, they should. see my examples of our Class C's of 212.73.210 and
212.73.211. I think you have a basis for taking this up with paetec.
Len
___________________________________________________________________
Men & Mice: QuickDNS - DNS Expert - DNS Training - DNS Consulting
DNS Classes: Maidenhead, 01/21-23/02, Frankfurt 02/13-14/02
http://www.menandmice.com/8000/8100_course_schedule.html
|

Return to Digital Point Solutions' Home Page |