reverse-zone and subnet

Barry Margolin barmar at genuity.net
Fri Jan 18 19:23:32 UTC 2002


In article <a29ljr$jkj at pub3.rc.vix.com>,
Peter Pilsl  <pilsl at goldfisch.at> wrote:
># dig @localhost -x 213.229.42.97 +norecursion

You need recursion, or your server won't go to the ISP's servers to look up
the CNAME records that link into this subdomain.

>; <<>> DiG 9.2.0rc3 <<>> @localhost -x 213.229.42.97 +norecursion
>;; global options:  printcmd
>;; Got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1718
>;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 4
> 
>;; QUESTION SECTION:
>;97.42.229.213.in-addr.arpa.    IN      PTR
> 
>;; AUTHORITY SECTION:
>.                       162574  IN      NS      A.ROOT-SERVERS.NET.
>.                       162574  IN      NS      B.ROOT-SERVERS.NET.
>.                       162574  IN      NS      C.ROOT-SERVERS.NET.
><skip rest of sad result>
>
>if I leave the norecursion I get the currently assigned reverse-lookup
>of my ISP ...
>
>my local bind still doesnt feel responsible for this adress-range.

The problem isn't with your local bind.  Your ISP hasn't installed the
CNAME records or the delegation records for your subdomain.  They still
think they're authoritative for your subnet's reverse DNS.

$ dig -x 213.229.42.96/29 ns

; <<>> DiG 8.3 <<>> -x ns 
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUERY SECTION:
;;	96/29.42.229.213.in-addr.arpa, type = NS, class = IN

;; AUTHORITY SECTION:
42.229.213.in-addr.arpa.  1D IN SOA  ns1.inode.at. office.inode.at. (
					2001090501	; serial
					10H		; refresh
					1H		; retry
					2W		; expiry
					1D )		; minimum

$ dig -x 213.229.42.97 any @ns1.inode.at

; <<>> DiG 8.3 <<>> -x any @ns1.inode.at 
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;; QUERY SECTION:
;;	97.42.229.213.in-addr.arpa, type = ANY, class = IN

;; ANSWER SECTION:
97.42.229.213.in-addr.arpa.  1D IN PTR  gate.ihf-hr.org.

;; AUTHORITY SECTION:
42.229.213.in-addr.arpa.  1D IN NS  ns1.inode.at.
42.229.213.in-addr.arpa.  1D IN NS  ns2.inode.at.

;; ADDITIONAL SECTION:
ns1.inode.at.		1D IN A		195.58.160.2
ns2.inode.at.		1D IN A		195.58.161.3

-- 
Barry Margolin, barmar at genuity.net
Genuity, Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.


More information about the bind-users mailing list