reverse problems

[Michael Kjorling]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Your reverse setup is a mess. The delegation records in
218.194.203.in-addr.arpa. disagree with the ones in
0-255.218.194.203.in-addr.arpa., there is no zone
130-254.0-255.218.194.203.in-addr.arpa. (if there was, this would most
likely be a configuration error as well, since you cannot have a CNAME
pointing to a CNAME. RFC 2317 mentions this.) When asked about
130.130-254.0-255.218.194.203.in-addr.arpa. qtype=any, both published
servers return SERVFAIL status.

Also the zone name part '0-255' implies to me that the entire /24 is
convered; why not redelegate the parent in that case?

Go read RFC 2317, then tear your reverse setup down completely and
build it from scratch. It seems to me to be FUBAR.


Michael Kjörling


On Nov 4 2001 21:51 +1100, Andi Salimun wrote:

> Hello I have strange problem with reverse lookup. I have to perform
> hostname lookup first then reverse will work. In order words is not working.
>
> Here are my configurations snip
>
> db.203.194.218
> $TTL 38400
> @                       IN      SOA     ns1.shellcafe.com.
> root.ns1.shellcafe.com. (
>                 18              ; Serial
>                 8H              ; refresh, seconds
>                 2H              ; retry, seconds
>                 1W              ; expire, seconds
>                 1D )            ; minimum, seconds
>
>          IN      NS      ns1.shellcafe.com.
>          IN      NS      ns1.dslglobal.net.
> ;;
> ;;
>
> 130     PTR     ns1.shellcafe.com.
> 131     PTR     ns1.shellcafe.com.
> 136     PTR     hacked.your.irc.daemon.sh.
> 137     PTR     need-2-take-a-b.ath.cx.
> 138     PTR     rm-rf.linux.and.install.free.bsd.st.
> 139     PTR     dat-bitch-is.mine.nu.
> 140     PTR     ditangkep.satpam.gara2.nyolong.cd.di.wuzic.com.
> 141     PTR     wtf.is.wuzic.com.
> 142     PTR     suka.sama.ce.yang.ndut.ndut.net.
> 143     PTR     cakep.sexy.tinggi.putih.tapi.ndut.net.
>
> named.conf
> zone "130-254.0-255.218.194.203.in-addr.arpa"
>          type master;
>          file "db.203.194.218";
> };
>
>
> This my dig.
> [root at ns1 namedb]# dig d2 +norec +nosea -x 203.194.218.131
>
> ; <<>> DiG 8.3 <<>> d2 +norec +nosea -x
> ;; res options: init defnam
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36947
> ;; flags: qr ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
> ;; QUERY SECTION:
> ;;      131.218.194.203.in-addr.arpa, type = ANY, class = IN
>
> ;; ANSWER SECTION:
> 131.218.194.203.in-addr.arpa.  23h52m38s IN
> CNAME  131.0-255.218.194.203.in-addr.arpa.
>
> ;; AUTHORITY SECTION:
> 218.194.203.in-addr.arpa.  23h52m38s IN NS  sg1dns01.wingtai-iadvantage.com.sg.
> 218.194.203.in-addr.arpa.  23h52m38s IN NS  sg1dns02.wingtai-iadvantage.com.sg.
>
> ;; ADDITIONAL SECTION:
> sg1dns01.wingtai-iadvantage.com.sg.  39m39s IN A  202.85.161.81
> sg1dns02.wingtai-iadvantage.com.sg.  42m37s IN A  202.85.161.82
>
> ;; Total query time: 1 msec
> ;; FROM: ns1.shellcafe.com to SERVER: default -- 203.194.218.131
> ;; WHEN: Mon Nov  5 18:41:35 2001
> ;; MSG SIZE  sent: 46  rcvd: 173
>
> I think the ISP have delegated it to my nameserver. But still problems..
>
> Thank for the help in advance.
>
> Regards,
> Andi Salimun
>
>

- -- 
Michael Kjörling  --  Programmer/Network administrator  ^..^
PGP: 95f1 074d 336d f8f0 f297 6a5b 2aa3 7bfd 8a70 e33e   \/
Internet: michael at kjorling.com -- FidoNet: 2:204/254.4

"There is something to be said about not trying to be glamorous
and popular and cool. Just be real -- and life will be real."
(Joyce Sequichie Hifler, September 13 2001, www.hifler.com)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Public key is at http://michael.kjorling.com/contact/pgp.html

iD8DBQE75nFBKqN7/Ypw4z4RAh46AKD07zy0lXqakVSIsgXV1TuCmMv9hwCgwej+
p4oWSePslQ+T1LiUFM6DCgk=
=ZZD2
-----END PGP SIGNATURE-----