Reverse lookups not working when Internet connection failed.
David Carvalho
david at di.ubi.pt
Fri Nov 4 16:54:30 UTC 2022
Thanks for the replies.
My reverse zone in named.conf. My secondary dns gets it automatically daily, along with the "di.ubi.pt.".
zone "0-28.66.136.193.in-addr.arpa." IN {
allow-query { any; };
type master;
file "rev0.hosts";
};
I'll have to study more about some things you guys wrote. This is getting complicated 😉
Regards
David
-----Original Message-----
From: bind-users <bind-users-bounces at lists.isc.org> On Behalf Of Grant Taylor via bind-users
Sent: 04 November 2022 16:36
To: bind-users at lists.isc.org
Subject: Re: Reverse lookups not working when Internet connection failed.
On 11/4/22 10:07 AM, David Carvalho via bind-users wrote:
> My reverse zone file
What is the origin of your zone file? 0-28.66.136.193.in-addr.arpa.?
> 1.0-28.66.136.193.in-addr.arpa. IN A 193.136.66.1
You seem to be using RFC 2317 Classless IN-ADDR.ARPA delegation.
As such, your reverse DNS is /dependent/ upon the parent zone; 66.136.193.in-addr.arpa., where the Classless IN-ADDR.ARPA delegation CNAME records exist. E.g.
1.66.136.193.in-addr.arpa. IN CNAME
1.0-28.66.136.193.in-addr.arpa.
It is likely this -- almost certainly -- external dependency was missing while your Internet connections was down that prevented your systems from being able to resolve reverse DNS.
Two options come to mind:
1) Create a bogus 66.136.193.in-addr.arpa. zone locally to host the
2317 CNAMEs. -- This will likely have some side effects that need to be mitigated.
2) Leverage Response Policy Zone(s) to try to influence the lookup as others suggested. E.g. cause 1.66.136.193.in-addr.arpa. to become 1.0-28.66.136.193.in-addr.arpa. locally. -- I'd have to read about how to do this.
Aside: I see no need for 1.0-28.66.136.193.in-addr.arpa. to have an A record. But I don't see any problem with having it either.
> 1.0-28.66.136.193.in-addr.arpa. IN A 193.136.66.1
>
> ; Reverse mapping
>
> 1 IN PTR dns.di.ubi.pt.
> ...
These are the types of PTR records that I would expect to see in a reverse DNS context.
--
Grant. . . .
unix || die
More information about the bind-users
mailing list