reverse zone using generate produced 500M image

Sorkin, David (David) DSORKIN at lucent.com
Sun Jun 30 08:28:07 UTC 2002


Hi,

I upgraded today to 8.3.3 from 8.2.3 to addresses security issues. I also configured bind to run chrooted and as a non-privileged user. This worked out but the upgrade broke a piece of in house code which I did not write that we use for reverse zone auto generation. The program is supposed to take queries like:

109.88.118.135.in.addr.arpa ptr

and produce a response like

h135.118.88.109.outland.lucent.com.

> It would also do the inverse process for the forward zone.
> 
> Anyway, after the upgrade I started seeing thousands and thousands of entries like:
> 
30-Jun-2002 07:37:39.144 wrong ans. name (. != 142.66.118.199.in-addr.arpa)
30-Jun-2002 07:37:39.156 invalid RR type 'PTR' in authority section (name = '142.66.118.199.in-addr.arpa') from [192.11.223.170].53
30-Jun-2002 07:37:39.164 invalid RR type 'NS' in additional section (name = '66.118.199.in-addr.arpa') from [192.11.223.170].53

I'd like to try to solve this problem without more coding so just to see what would happen I tried using the generate directive to create PTR records for 82 B class networks. It used up nearly 500 Mb of RAM. This is not going to be workable and wildcard PTR records aren't an option either. (also I can't get rid of split DNS).

I was hoping that someone could tell me how they've dealt with this problem elsewhere.


> Thanks in advance,
> David Sorkin <dsorkin at lucent.com>
> 


More information about the bind-users mailing list