RFC 1918 response

Dawn Connelly dawn.connelly at gmail.com
Sat Jul 28 22:35:10 UTC 2007


The point of this exercise is to tell your machine that you are
authoritative for it. Internal IP address space should not be queried
outside of your network. Set that zone up the same way you would any other
zone that you are authoritative for. Put your own email address and master
server as well as slave servers in the NS fields. If you want to populate it
with correct information- spiffy. If not, at least you won't be adding load
to internet root servers asking them things that they can't possibly answer.
Hope that helps. :)
On 7/28/07, Chris <cpollock at embarqmail.com> wrote:
>
> On Wednesday 25 July 2007 10:01 pm, Dawn Connelly wrote:
> > Your DNS server is trying to query root servers for private IP space.
> It's
> > the polite way of saying "Huh, nope, we don't have that
> information...don't
> > ask us again."
> > http://www.isc.org/index.pl?/sw/bind/FAQ.php
> >
> Ok, I checked the FAQ, should have done that in the first place and I see
> that
> it says I should setup my own empty zone like this in my named.conf:
> zone "168.192.IN-ADDR.ARPA" {
>            type master;
>            file "empty";
>    };
>
> The faq then goes on to say:
>
>    empty:
>    @ 10800 IN SOA <name-of-server>. <contact-email>. (
>                   1 3600 1200 604800 10800 )
>    @ 10800 IN NS <name-of-server>.
>
> That is where I'm confused as to what to place in the <name-of server>,
> and so
> forth. Using the example dig @prisoner.iana.org hostname.as112.net any,
> that
> is shown at http://public.as112.net/node/7 I get:
>
> ; <<>> DiG 9.4.1 <<>> @prisoner.iana.org hostname.as112.net any
> ; (1 server found)
> ;; global options:  printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51027
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1
>
> ;; QUESTION SECTION:
> ;hostname.as112.net.            IN      ANY
>
> ;; ANSWER SECTION:
> hostname.as112.net.     15      IN      SOA     rfc1918.sth.netnod.se.
> hostmaster.netnod.se. 2002052700 28800 7200 604800 86400
> hostname.as112.net.     15      IN      NS      blackhole-1.iana.org.
> hostname.as112.net.     15      IN      TXT     "See http://as112.net/ for
> more information."
> hostname.as112.net.     15      IN      TXT     "Autonomica" "Stockholm,
> Sweden"
>
> ;; ADDITIONAL SECTION:
> blackhole-1.iana.org.   3600    IN      A       192.175.48.6
>
> So should this @ 10800 IN NS <name-of-server>. be "blackhole-1.isna.org"?
>
> And this @ 10800 IN SOA <name-of-server>. <contact-email>
> "rfc1918.sth.netnod.se"? And "hostmaster.netnod.se" as the contact-email?
> Or
> am I misunderstanding how this is supposed to be written?
>
> --
> Chris
> KeyID 0xE372A7DA98E6705C
>
>
>




More information about the bind-users mailing list