PTR zone /28 not working

[Mark Andrews]

In message <58636e100911041824i169d2337s89edfabb07e46492 at mail.gmail.com>, joans4nz writes:
> Hi,
> 
> I use Bind-9.4.2 running on FreeBSD-7.2.
> 
> Last week my DNS was reconfigured to a new IP address pool by my ISP and by
> me from a /29 to /28 address range.
> 
> Using "How is my DNS" I check my domain and all is good except reverse
> lookup. My ISP also reconfigured the PTR zone and delegate the reverse zone
> like RFC-2317 and this is the change executed by my ISP.
> 
> 224/28   IN   NS   ns1.mydomain.com
> 224/28   IN   NS   ns2.mydomain.com
> 225        IN   CNAME   225.224/28.CCC.BBB.AAA.in-addr.arpa.
> 226        IN   CNAME   226.224/28.CCC.BBB.AAA.in-addr.arpa.
> 227        IN   CNAME   227.224/28.CCC.BBB.AAA.in-addr.arpa.
> 228        IN   CNAME   228.224/28.CCC.BBB.AAA.in-addr.arpa.
> 229        IN   CNAME   229.224/28.CCC.BBB.AAA.in-addr.arpa.
> 230        IN   CNAME   230.224/28.CCC.BBB.AAA.in-addr.arpa.
> 231        IN   CNAME   231.224/28.CCC.BBB.AAA.in-addr.arpa.
> 232        IN   CNAME   232.224/28.CCC.BBB.AAA.in-addr.arpa.
> 233        IN   CNAME   233.224/28.CCC.BBB.AAA.in-addr.arpa.
> 234        IN   CNAME   234.224/28.CCC.BBB.AAA.in-addr.arpa.
> 235        IN   CNAME   235.224/28.CCC.BBB.AAA.in-addr.arpa.
> 236        IN   CNAME   236.224/28.CCC.BBB.AAA.in-addr.arpa.
> 237        IN   CNAME   237.224/28.CCC.BBB.AAA.in-addr.arpa.
> 238        IN   CNAME   238.224/28.CCC.BBB.AAA.in-addr.arpa.

Firstly do you want help or not?  If so why all the
CCC.BBB.AAA.in-addr.arpa's?  It doesn't help people help you.
 
> I have configured my PTR zone 224/28.CCC.BBB.AAA.in-addr.arpa. but, when I
> test my PTR zone using "www.kloth.net/services/nslookup.php" or "
> network-tools.com/nslook/Default.asp" using default name server I receive
> "Queried domain does not exist".
> 
> If I test my zone using my name server in this web sites mentioned I
> receive:
> 
> server can't find 226.CCC.BBB.AAA.in-addr.arpa: REFUSED

Well you don't serve CCC.BBB.AAA.in-addr.arpa and you don't allow
recursion.  You should make yourself a stealth slave for
CCC.BBB.AAA.in-addr.arpa.  That way reverse lookups will continue
to work when your external link goes down.  It will also allow
remote tools to not require recursion to be enabled to find the
CNAME records when they query your server.
 
> If I use the syntax:
> 
> 226.CCC.BBB.AAA.in-addr.arpa.   IN   PTR   ns1.mydomain.com.
> 
> /var/log/messages show
> 
> named[38267]: master/db.my_ptr_zone:21: ignoring out-of-zone data
> (226.CCC.BBB.AAA.in-addr.arpa)

The zone's name is 224/28.CCC.BBB.AAA.in-addr.arpa,
226.CCC.BBB.AAA.in-addr.arpa in not part of the zone.

> 226     IN   PTR   ns1.mydomain.com.
> 
> /var/log/messages does not show any messages but when I test my DNS server
> from the web sites before mentioned I still receive
> 
> server can't find 226.CCC.BBB.AAA.in-addr.arpa: REFUSED
> 
> If I modify the PTR zone in named.conf and db file to
> 66.BBB.AAA.in-addr.arpa. /var/log/messages does not show any messages and
> when I test my DNS server from the web sites before mentioned I receive a
> good answer from my DNS server.
> 
> $ORIGIN 224/28.BBB.CCC.AAA.IN-ADDR.ARPA. does not work
> 
> $ORIGIN 6.CCC.AAA.IN-ADDR.ARPA. it work
> 
> What is wrong?
> 
> Why does not work using 224/28.BBB.CCC.AAA.IN-ADDR.ARPA. zone configuration?
> 
> Thanks for your time.
> 
> joans4nz
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org