Now I'm in trouble...

[Mark Andrews]

> > I DO have reverse delegation
> I know, it's Andrew JW who said wrongly you don't, I didn't.
>  
> > Checking for nameserver BIND dead
> 
> Correct, there is no name server reachable on
> dns1.light-family.com. Your BIND apparently crashed but for a reason
> which seems unrelated to its configuration (faulty hardware (dmesg may
> help), broken software, ask for Suse-specific trouble, may be).
> 
> =====================================================================
> 
> Thanks Stephane
> 
> OK - Part one corrected....Some googling pointed me to an IPv6 path for my 
> error
> 
> Oct  6 07:13:45 dns1 named[8724]: couldn't add command channel ::1#953: 
> address not available
> 
> for SuSE 9.2 - /etc/modprobe.conf    I changed two items
> 
> alias sit0 ipv6                  changed to:  #alias sit0 ipv6
> alias net-pf-10           ipv6   changed to:   alias net-pf-10 none
> 
> Curiously enough I now get the warning:
> 
> Oct  6 11:41:35 dns1 named[6344]: no IPv6 interfaces found
> 
> and farther down:
> 
> Oct  6 11:41:35 dns1 named[6344]: command channel listening on 
127.0.0.1#953
> Now from an nslookup I get:
> 
> Authoritative answers can be found from:
> 120.156.124.66.in-addr.arpa     nameserver = dns1.light-family.com
> 120.156.124.66.in-addr.arpa     nameserver = ns1.4servers.com
> 120.156.124.66.in-addr.arpa     nameserver = ns2.4servers.com
> dns1.light-family.com   internet address = 66.124.156.123
> ns1.4servers.com        internet address = 168.143.168.1
> ns2.4servers.com        internet address = 168.143.171.129
> *** No address (A) records available for 66.124.156.123
> 
> And  Bind is still running - Yeah !
> 
> The last  IP entry in /etc/named.conf  is:
> 
> zone "120.156.124.66.in-addr.arpa" in {
>         type master;
>         file "db.66.124.156.120";
> };
> 
> Finally on to dealing with the files in /var/lib/named ??   SBC sent me a 
> one page blurb about adding
> 
> 123
> 124
> 125   etc
> 
> as entires to  120.156.124.66.in-addr.arpa    it almost looks like IPv5 (I 
> know there is no such thing) -- so all my entires now in 
> 123.156.124.66.in-addr.arpa   now go to the "123" lines of the 
> db.66.124.156.120 file ??

	Your nameserver (dns1.light-family.com) is reachable.

; <<>> DiG 9.4.0a1 <<>> axfr 120.156.124.66.in-addr.arpa @dns1.light-family.com
; (1 server found)
;; global options:  printcmd

	The MNAME (origin) is wrong.  It should be "dns1.light-family.com."
	not "dns1.120.156.124.66.in-addr.arpa.".
	The RNAME (contact) is wrong.  It should be a valid encoded email
	address e.g. "Bill\.Light.kp.org" for Bill.Light at kp.org.

120.156.124.66.in-addr.arpa. 86400 IN   SOA     dns1.120.156.124.66.in-addr.arpa. webmaster.120.156.124.66.in-addr.arpa. 2004032919 7200 3600 604800 7200

	You only need one of these.  Nothing looks at all the PTR
	records.  Client use the first one they get and ignore the
	rest.  Usually you use the name that the machine knows
	itself as.  Note there needs to a A/AAAA records with this
	name in the DNS.

120.156.124.66.in-addr.arpa. 86400 IN   PTR     www.light-family.com.
120.156.124.66.in-addr.arpa. 86400 IN   PTR     mail.light-family.com.
120.156.124.66.in-addr.arpa. 86400 IN   PTR     light-family.com.

	These two NS records are wrong.  According to the 
	delegation they should be ns1.4servers.com and ns2.4servers.com
	which both need to be setup to slave this zone.

120.156.124.66.in-addr.arpa. 86400 IN   NS      ns1.pbi.net.
120.156.124.66.in-addr.arpa. 86400 IN   NS      ns2.pbi.net.

120.156.124.66.in-addr.arpa. 86400 IN   NS      dns1.light-family.com.

	This should be a PTR record not a CNAME to itself.

123.120.156.124.66.in-addr.arpa. 86400 IN CNAME 123.120.156.124.66.in-addr.arpa.

120.156.124.66.in-addr.arpa. 86400 IN   SOA     dns1.120.156.124.66.in-addr.arpa. webmaster.120.156.124.66.in-addr.arpa. 2004032919 7200 3600 604800 7200
;; Query time: 219 msec
;; SERVER: 66.124.156.123#53(66.124.156.123)
;; WHEN: Fri Oct  7 08:55:23 2005
;; XFR size: 9 records (messages 1, bytes 279)

	You should also be a stealth slave for 156.124.66.IN-ADDR.ARPA.
	This way you always have the CNAME records even when your
	outside link is down.  You need the CNAMES to map the names
	generated by gethostbyaddr()/getnameinfo() into the names
	which the PTR records have.
	
zone "156.124.66.IN-ADDR.ARPA" {
	type slave;
	file "156.124.66.IN-ADDR.ARPA";
	masters { 206.13.28.11; 206.13.29.11; };
	notify no;
};

	If SBC didn't tell you to do this you need to ask then why
	not as they are not giving you the complete set of instructions
	on how to set this up.

	Mark
--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org