reverse DNS zone loop problem

Re: reverse DNS zone loop problem

From:

Date:

Time:

>My ISP delegated to us the zone 'onenet.it' so I also created the
>reverse zone file (which also should be delegated to us).

onenet.it A record:

C:\>dig -x 151.8.67.23

; <<>> DiG 9.2.3 <<>> -x 151.8.67.23
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41
;; flags: qr ra cd; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 3

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;23.67.8.151.in-addr.arpa. IN PTR

;; AUTHORITY SECTION:
8.151.in-addr.arpa. 34500 IN NS NS.INFUTURO.IT.
8.151.in-addr.arpa. 34500 IN NS NS.IUNET.IT.

... meaning the enclosing zone is the Class B 151.8, an no delegation below
that Class B.

>There's also a loop between our 2 name servers.

fix that problem later, whatever "loop" is. the first problem is that
there is no delegation to your NS, no delegation below the Class B.

>Our master is dns.onenet.it 151.8.67.20
>our slave is dns2.onenet.it 151.8.67.22

nope, no better there:

C:\>dig -x 151.8.67.23 @151.8.67.20

; <<>> DiG 9.2.3 <<>> -x 151.8.67.23 @151.8.67.20
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41
;; flags: qr ra cd; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 3

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;23.67.8.151.in-addr.arpa. IN PTR

;; AUTHORITY SECTION:
8.151.in-addr.arpa. 34500 IN NS NS.INFUTURO.IT.
8.151.in-addr.arpa. 34500 IN NS NS.IUNET.IT.

;; ADDITIONAL SECTION:
NS.INFUTURO.IT. 81207 IN A 192.106.1.9
NS.IUNET.IT. 160044 IN A 192.106.1.1

;; Query time: 370 msec
;; SERVER: 151.8.67.20#53(151.8.67.20)

same for .22. Both your servers are 'ra', so you need to restrict that.

>We have 151.8.67.1 to 151.8.67.30

but there is no delegation of that /27,

>I named the reverse 0-31.67.8.151.in-addr.arpa.

that's ok. so your PTR records would be

@origin 0-31.67.8.151.in-addr.arpa.

1 PTR host.name.it.
2 etc
...
31

> (with the previous ISP
>we had before it worked), but dnsstuff.com says tha mainstream NS is
>looking for 1.0/27.67.8.151.in-addr.arpa. zone file; is this correct and
>it's just a different notation, or do I have to rename our reverse zone
>file ?

the name of the file is irrelevant, it's the contents of the file that counts.

>pps: Why is the Men and Mice web site so slow to connect to ?

too many icebergs in January.

Len

Sales:
888/4-DPOINT

Support:
858/452-3696