rDNS
Mark Andrews
marka at isc.org
Fri Jan 20 20:54:58 UTC 2017
You have the netblock 162.202.233.80-162.202.233.87 (162.202.233.80/29).
When software performs a reverse lookup it constructs a DNS name
from the address like 80.233.202.162.in-addr.arpa. Now as the
netblock is not a full /24 you either have to create 8 zones, one
for each PTR record, or provide records at those names which map
the lookups to new names. The later is what has been done here.
The technique is described in RFC 2317.
ATT has delegated a zone for the first address in the address block
to you. That zone is called 80.233.202.162.in-addr.arpa. It has
then added CNAME records to map lookups for the rest of the address
in your address block into this zone.
e.g.
81.233.202.162.in-addr.arpa. CNAME 81.80.233.202.162.in-addr.arpa.
...
86.233.202.162.in-addr.arpa. CNAME 86.80.233.202.162.in-addr.arpa.
The 80.233.202.162.in-addr.arpa zone should look like this.
$TTL 1h
@ SOA ns1.archaxis.net. me.archaxis.net. (
2017012002 ; Serial
1h ; Refresh
1h ; Retry
4w ; Expire
1h ) ; Negative cashing TTL
NS ns1.archaxis.net.
NS ns2.archaxis.net.
PTR network.archaxis.net.
81 PTR alpha.archaxis.net.
82 PTR bravo.archaxis.net.
87 PTR broadcast.archaxis.net.
I increased the expire field to 4 weeks as it was way too small.
Note the reverse for 162.202.233.80 is NOT mapped to a new name so
the PTR record for that address is at the zone's apex. As all the
records had a TTL of 1 hour I set the default TTL to that value and
removed the per record setting of the TTL. I also removed the class
field as that is inherited from the zone's declaration.
Don't forget to bump the zones serial when you install it.
Once you have the above sorted out and have tested it. You now
need to slave the zone 233.202.162.in-addr.arpa as that contains
the CNAME records. ATT should allow you to transfer it. If they
don't find a ISP that knows what they are doing. You need a local
copy of the zone so that when you link goes down you can still do
reverse lookups.
zone "233.202.162.in-addr.arpa" {
type slave;
masters { 151.164.1.1; };
file "233.202.162.in-addr.arpa";
};
Mark
In message <20170120162146.GA14356 at fantomas.sk>, Matus UHLAR - fantomas writes:
> On 20.01.17 09:57, Ron Wingfield wrote:
> > I am having difficulty configuring reverse DNS. This has been a
> problem
> > for over a year between my server(s) and my ISP, AT&T. Specifically, I
> > cannot eMail to any recipient that requires rDNS verification, e.g.,
> > SBCglobal.net, Comcast.net, or AOL. Very frustrating.
>
> > . . .why shouldnt this point to my server, 162.202.233.81 and not
> > AT&Ts?
>
> because reverse domains are also tracked from the DNS root:
>
> 233.202.162.in-addr.arpa. 7200 IN SOA ns1.swbell.net.
> postmaster.swbell.net. 2016061700 10800 900 604800 3600
>
> 81.233.202.162.in-addr.arpa. 7200 IN CNAME
> 81.80.233.202.162.in-addr.arpa.
>
> > I have coded my BIND 9 in-addr.arpa zone file as follows:
> >
> > $ORIGIN 233.202.162.in-addr.arpa.
>
> stop defining $ORIGIN in zone file. the $ORIGIN is taken from named "zone"
> statement.
>
> According to those above you have to configure zone
> 80.233.202.162.in-addr.arpa.
> and adk swbell.net to fetchit from you.
>
> > $TTL 3h
> > @ IN SOA ns1.archaxis.net. me.archaxis.net. (
> > 2017012002 ; Serial
> > 1h ; Refresh
> > 1h ; Retry
> > 1h ; Expire
> > 1h ) ; Negative cashing TTL
> >
> > 3600 IN NS ns1.archaxis.net.
> > 3600 IN NS ns2.archaxis.net.
> >
> > 80 3600 IN PTR network.archaxis.net.
> > 81 3600 IN PTR alpha.archaxis.net.
> > 82 3600 IN PTR bravo.archaxis.net.
> > 87 3600 IN PTR broadcast.archaxis.net.
> >
> > What is wrong? Is this my problem, or with AT&T?
>
>
>
> --
> Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> Spam is for losers who can't get business any other way.
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to
> unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: marka at isc.org
More information about the bind-users
mailing list