Interpreting a DNS report
Sten Carlsen
ccc2716 at vip.cybercity.dk
Tue Jul 6 22:37:49 UTC 2004
Tom Gill wrote:
>Sten,
>
>I appreciate the response. I agree with my client. I can find many
>nameservers that are not able to perform the reverse lookup. Especially
>after looking at the dns report, I definitely see that there is a problem.
>The real problem though is that I am having a hard time understanding where
>to look or what to do. The dns report says I am missing nameservers as well
>as have lame nameservers. Do we need to speak with our upstream provider
>(Time Warner Telecom)?
>
>
There seems to be two issues here:
- forward lookup: lame nameservers, my server lists
"netra-ns1.orlandotelco.net" as authoratative, not the official servers.
this should be cleared with your DNS service provider/the records at the
upstream provider should be corrected to indicate the nameserver that
will actually be authorative for your domain.
- reverse lookup: there seems to be problems with reverse delegation
further up in the hierachy, there are a lot of explanations in the
archives from the bind-users mail-list. Archives are at isc.org
(somewhere, I don't remember where).
Basically this looks like a mess to me, you need, I guess, a good spring
cleaning.
>Thanks again,
>Tom
>
>-----Original Message-----
>From: Sten Carlsen [mailto:ccc2716 at vip.cybercity.dk]
>Sent: Tuesday, July 06, 2004 5:51 PM
>To: Tom Gill
>Cc: comp-protocols-dns-bind at isc.org
>Subject: Re: Interpreting a DNS report
>
>
>Tom Gill wrote:
>
>
>
>>I am with a small ISP in Orlando, Florida. Some of our users are
>>having problems sending email to others and are receiving returned
>>messages that say our email server has no reverse lookup.
>>
>>When I go to www.dnsstuff.com and use the reverse lookup utility on
>>our mail server's IP (216.54.161.51), it comes back just fine
>>(sun-msg-1.orlandotelco.net).
>>
>>However, when I go to www.dnsreport.com and do a reverse on the
>>161.54.216.in-addr.arpa zone, I fail some of the tests:
>>
>>It says we have lame nameservers, and missing (stealth) nameservers.
>>Can anyone help interpret these in English? The results of the
>>dnsreport can be found here:
>>
>>http://www.dnsreport.com/tools/dnsreport.ch?domain=161.54.216.in-addr.arpa
>>
>>Thanks for your time,
>>Tom
>>
>>
>>
>>
>>
>I tried both forward and reverse lookup from here, forward is fine.
>Reverse don't return any answer for me, so your client could be right.
>
>--
>Best regards
>
>Sten Carlsen
>
>No improvements come from shouting:
>
> "MALE BOVINE MANURE!!!"
>
>
>
>
--
Best regards
Sten Carlsen
No improvements come from shouting:
"MALE BOVINE MANURE!!!"
More information about the bind-users
mailing list