Wildcards in reverse DNS

[Joseph S D Yao]

On Sat, Dec 23, 2006 at 11:53:11PM +0100, blueCommand wrote:
> Hello!
> I'm playing around with my nameserver (BIND9.3.3) and it's IPv6 support.
> 
> My reverse is this:
...

...
> The problem is that it's only the out-of-bounds wildcard that works, even if
> I split them to different files and / or move around / remove the oter
> wildcards.
> I simply can't get any beef sub och dead sub wildcards to work.
> 
> Anybody spot anything very wrong with this approch?
> 
> Greetings and marry Xmas!

Merry Christmas back, and a happy new year as well!


> ;$ORIGIN .

It's good that this is commented out - it could mess up the whole file
if it weren't.  You do NOT want to declare that your zone file is
authoritative for the root domain!  [Unless it is, but it's not.]


> $TTL 3600       ; 1 hour
> @                               IN SOA ns1.cmd.nu. dns.cmd.nu. (
>                                 2006122211 ; serial
>                                 5400       ; refresh (1 hour 30 minutes)
>                                 900        ; retry (15 minutes)
>                                 604800     ; expire (1 week)
>                                 3600       ; minimum (1 hour)
>                                 )
>                                 IN        NS      ns1.cmd.nu.
> 
> ; Out of bounds
> $ORIGIN 4.c.f.f.8.d.6.1.1.0.0.2.ip6.arpa.
> *                               IN       PTR      out-of-bounds.ipv6.cmd.nu.
> 
> ; Beef sub
> $ORIGIN f.e.e.b.4.c.f.f.8.d.6.1.1.0.0.2.ip6.arpa.
> 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 IN       PTR      brownie.cmd.nu.
> 7.b.7.b.2.6.e.f.f.f.9.2.c.0.2.0 IN       PTR      electron.cmd.nu.
> a.6.c.3.3.4.e.f.f.f.9.2.c.0.2.0 IN       PTR      hermes.cmd.nu.
> c.b.6.e.4.5.e.f.f.f.1.8.0.0.e.2 IN       PTR      thunder.cmd.nu
> 4.0.9.2.1.e.e.f.f.f.2.2.0.5.2.0 IN       PTR      mars.cmd.nu
> 3.3.e.8.f.8.e.f.f.f.3.b.2.0.2.0 IN       PTR      constella.cmd.nu
> 
> *                               IN       PTR      not-active.ipv6.cmd.nu.

You need to explicitly wildcard the subdomains that were used above:

*				IN	PTR	not-active.ipv6.cmd.nu.
*.0				IN	PTR	not-active.ipv6.cmd.nu.
*.2				IN	PTR	not-active.ipv6.cmd.nu.
*.0.0				IN	PTR	not-active.ipv6.cmd.nu.
*.2.0				IN	PTR	not-active.ipv6.cmd.nu.
*.e.2				IN	PTR	not-active.ipv6.cmd.nu.
*.0.0.0				IN	PTR	not-active.ipv6.cmd.nu.
*.0.2.0				IN	PTR	not-active.ipv6.cmd.nu.
*.5.2.0				IN	PTR	not-active.ipv6.cmd.nu.
*.0.e.2				IN	PTR	not-active.ipv6.cmd.nu.
...
*.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0	IN	PTR	brownie.cmd.nu.
*.3.e.8.f.8.e.f.f.f.3.b.2.0.2.0	IN	PTR	constella.cmd.nu
*.6.c.3.3.4.e.f.f.f.9.2.c.0.2.0	IN	PTR	hermes.cmd.nu.
*.b.7.b.2.6.e.f.f.f.9.2.c.0.2.0	IN	PTR	electron.cmd.nu.
*.0.9.2.1.e.e.f.f.f.2.2.0.5.2.0	IN	PTR	mars.cmd.nu
*.b.6.e.4.5.e.f.f.f.1.8.0.0.e.2	IN	PTR	thunder.cmd.nu

[81 subdomains total]

> ; Dead sub
> $ORIGIN d.a.e.d.4.c.f.f.8.d.6.1.1.0.0.2.ip6.arpa.
> 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 IN       PTR      brownie.cmd.nu.
> 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 IN       PTR      ns1.cmd.nu.
> *                               IN       PTR      tunnel.ipv6.cmd.nu.

Same here, only easier, 16 subdomains total:

*				IN	PTR	tunnel.ipv6.cmd.nu.
*.0				IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0				IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0.0				IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0.0.0			IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0.0.0.0			IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0.0.0.0.0			IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0.0.0.0.0.0			IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0.0.0.0.0.0.0		IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0.0.0.0.0.0.0.0		IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0.0.0.0.0.0.0.0.0		IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0.0.0.0.0.0.0.0.0.0		IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0.0.0.0.0.0.0.0.0.0.0	IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0.0.0.0.0.0.0.0.0.0.0.0	IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0.0.0.0.0.0.0.0.0.0.0.0.0	IN	PTR	tunnel.ipv6.cmd.nu.
*.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0	IN	PTR	tunnel.ipv6.cmd.nu.

-- 
Joe Yao
-----------------------------------------------------------------------
   This message is not an official statement of OSIS Center policies.