some.public.dotted.reverse.ip.in-addr.arpa/PTR/IN' denied

[Michael Varre]

Hello all - i am running two internal recursive dns servers each running
BIND 9.4.2-P1. These servers serve up zones i host for internal use only, as
well as act as recursive name servers for internal clients.  Everything
seems to be fine other than the fact that i seem to be getting alot of the
following in the log:

 Jul 24 18:30:00 NSI-02 named[11920]: client ::1#21969: query (cache)
'some.public.dotted.reverse.ip.in-addr.arpa/PTR/IN' denied



I've tried running a manual lookup for all these ips that are showing up
like this and i successfully get answers.  So I dont really understand why
my servers are responding back with DENIED for so many of them.  And by many
i dont really mean a whole lot, but all the ones i've manually tested work
fine, so i suppose one is too many.



Thanks


-- 




mv
315.952.5753