Classless Delegation

[Mark_Andrews at isc.org]

> 
> Hey people I have been struggling with this for two days now and need
> someone to direct a question at. I hope that some of you have time to
> help
> 
>    We have been delegated a 66.126.189.32/27 from SBC. They state that
> the delegation has been done in compliance with RFC 2317. They also
> state that I should run a zone of 32.189.126.66.in-addr.arpa and that
> I should add NS records for ns1.pbi.net and ns2.pbi.net. They also
> want me to allow zone transfers to bothof those address.
> 
> Here is what I have come up with (I am using bind 9.2.0).
> 
> #######named.conf##########
> //BIND conf file
> 
> options {
>         directory "/var/named";
>         allow-transfer {10.2.1.37;10.1.1.37;206.13.28.11;206.13.29.11;
> };
> };
> ...
> zone "32.189.126.66.in-addr.arpa" in {
>         type slave;
>         file "32.189.126.66.arpa";
>         masters { 206.13.28.11; 206.13.29.11; };
> };

	Well you should be a *master* for 32.189.126.66.in-addr.arpa
	and a *slave* for 189.126.66.in-addr.arpa.  The later will
	allow you to resolve local addresses when the external link
	is down.

zone "189.126.66.in-addr.arpa" {
	type slave;
	file "189.126.66.arpa";
	masters { 206.13.28.11; 206.13.29.11; };
};

zone "32.189.126.66.in-addr.arpa" {
	type master;
	file "32.189.126.66.arpa";
};

> 
> 
> #####32.189.126.66.arpa#############
> 
> $TTL 3h
> 32.189.126.66.in-addr.arpa.             IN      SOA     ns1.pzs.com.
> root.ns1.pzs.com. (
>                                         7       ; Serial
>                                         3h      ; Refresh
>                                         1h      ; Retry
>                                         1w      ; Expire
>                                         1h )    ; Minimum
> 
> 
>                                 IN      NS      ns1.pzs.com.
>                                 IN      NS      ns2.pzs.com.
>                                 IN      NS      ns3.pzs.com.
> 
>                                 IN      NS      ns1.pbi.net.
>                                 IN      NS      ns2.pbi.net.
> 
> 
> 33.224.189.126.66.in-addr.arpa. IN      PTR     pzs-gw.pzs.com.
> 34.224.189.126.66.in-addr.arpa. IN      PTR     fire2.pzs.com.
> 35.224.189.126.66.in-addr.arpa. IN      PTR     fire.pzs.com.
> ...
> 62.224.189.126.66.in-addr.arpa. IN      PTR     66-126-189-62.pzs.com.

	The zone is 32.189.126.66.in-addr.arpa not
	224.189.126.66.in-addr.arpa.

33.32.189.126.66.in-addr.arpa. IN PTR	pzs-gw.pzs.com.
34.32.189.126.66.in-addr.arpa. IN PTR	fire2.pzs.com.
35.32.189.126.66.in-addr.arpa. IN PTR	fire.pzs.com.
...
62.32.189.126.66.in-addr.arpa. IN PTR	66-126-189-62.pzs.com

> 
> 
>      So when I try to use this I get ignoring out-of-zone data
> messages for each record of the file and I also get:
> 
> Apr  3 11:52:44 NS1 named[1108]: zone
> 32.244.189.126.66.in-addr.arpa/IN: refresh: unexpected rcode
> (NXDOMAIN) from master 206.13.28.11
> #53
> 
> Apr  3 11:52:44 NS1 named[1108]: zone
> 32.244.189.126.66.in-addr.arpa/IN: refresh: non-authoritative answer
> from master 206.13.29.11#53
> 
>       Conceptually I think that I understand what has to happen but it
> is just not getting done. Should this zone be run as a master or a
> slave? and is the 33.224.189... syntax correct for the zine file?
> 
>     Any help is greatly appreciated.
> 
> Thanks,
> 
> Brian
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org