Can an NS point to a CNAME

Matus UHLAR - fantomas uhlar at fantomas.sk
Thu Aug 12 11:32:32 UTC 2010


On 12.08.10 12:02, Phil Mayers wrote:
> We've had a report this morning that a user can't resolve:
>
> 71.225.219.134.in-addr.arpa PTR
>
> ...I think this is because the parent zone NS records point to CNAMEs. I  
> can see references to (much) older versions of bind not following such  
> delegations, but I'm not getting anything logged at the nameserver.

I don't know if it's older versions of BIND, but yes, the delegation for
219.134.in-addr.arpa. is broken:

% dig any 219.134.in-addr.arpa @w.arin.net.
[...]
;; AUTHORITY SECTION:
219.134.in-addr.arpa.   86400   IN      NS      dns1.rhbnc.ac.uk.
219.134.in-addr.arpa.   86400   IN      NS      dns0.rhbnc.ac.uk.

% dig any 219.134.in-addr.arpa @dns0.rhbnc.ac.uk.
[...]
;; ANSWER SECTION:
219.134.in-addr.arpa.   86400   IN      SOA     auth1.dns.rhul.ac.uk.
hostmaster.rhul.ac.uk. 2010081101 14400 1800 1209600 86400
219.134.in-addr.arpa.   86400   IN      NS      dns3.rhul.ac.uk.
219.134.in-addr.arpa.   86400   IN      NS      dns2.rhul.ac.uk.

;; ADDITIONAL SECTION:
dns2.rhul.ac.uk.        86400   IN      A       134.219.101.211
dns3.rhul.ac.uk.        86400   IN      A       134.219.101.212

...

dns0.rhbnc.ac.uk.       86400   IN      CNAME   dns2.rhul.ac.uk.
dns1.rhbnc.ac.uk.       86400   IN      CNAME   dns3.rhul.ac.uk.


> Is this still the case (that NS->CNAME is invalid)?

yes.


-- 
Matus UHLAR - fantomas, uhlar at fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Micro$oft random number generator: 0, 0, 0, 4.33e+67, 0, 0, 0...



More information about the bind-users mailing list