Reverse zones best practices

[Phil Mayers]

On 26/06/12 17:25, nex6 wrote:
> * Phil Mayers<p.mayers at imperial.ac.uk>  [2012-06-26 16:54:55 +0100]:
>
>
> I am not going to be editing files by hand, we actually have a tool. I am more
> concerned about best practices, and how to fix the mess.
>
> eg, say we have about 500 vlans (/24s) and say only 350 have reverse zones.
> from what I understand its best to just create the missing zones and fix the tools
> so new networks always get reverse zones created.
>
> becuase I dont think i can just create a larger /16 or /8. becuase they will
> overlap and create a bigger mess.....

Do what works for you. If you would rather create the full range of 
x.y.10.in-addr.arpa from your tools, that's fine.

I'm not sure the "best practice" you are asking about exists in that form.

One final point though - you *should* have an enclosing 10.in-addr.arpa 
zone or "fill the holes", so that you don't leak reverse lookups to the 
DNS root servers. You might even find that, unless you disable it, your 
nameserver creates the empty zone for you.