allow root domain access with breaking rDNS

[cammy]

Hi

We have our

http://www server

hosted externally and have A records in our zone file (bind) to point to this IP. Our rDNS zone file points at the ip range of our company hq for email rDNS lookups.

I would like to be able to have the root domain (ie

http://cammy.com)

point to the webserver ip only, but it currently round robins with the ip from the rDNS zone in.addr-arpa. How do I do this without breaking the critical rDNS for the mail services etc? Probably a stupid question for an expert. Please let me know if the question is not clear.

Cheers

Cammy

 

[Noway2]

I would like to be able to have the root domain (ie

http://cammy.com)

point to the webserver ip only, but it currently round robins with the ip from the rDNS zone in.addr-arpa.

This sounds like you either have two (or more) name servers with different reverse pointers for the same domain name. Unfortunately, this won't work. It is permissible to have multiple IP addresses for a domain and in certain circumstances, such as routers, this is commonly done. Having multiple IP for a name, while syntactically correct, is rather meaningless.

You would be better off to have the domain name point to the web server and have an MX record point to the mail server (at your HQ). Without an MX record, it will be assumed that the domain is the mail server, which isn't your case.

 

[cammy]

Hi

Thanks for your reply. We do have two name servers, but they don't have different reverse pointers for the same domain.

The reverse dns zone file for the domain is named 255-225.11.3.45.in-addr.arpa.txt. I have also added an entry in the domain zone file:

cammy.com.	IN	A	114.233.7.20

So, when a rDNS lookup is done for cammy.com the results returned are 45.3.11.225 and 114.233.7.20. We would like the only result to be 114.233.7.20, but we also need the rDNS zone file for the domain to be pointing at the existing ip range so our in house mail server can be resolved from it's ip.

Thanks

Cammy

 

[Noway2]

I would try making the forward and reverse pointers for the domain point to 114.233.7.20. I would then make an MX entry like this:

mail.cammy.com IN MX 10

Where you can define an A record for mail.cammy.com as 45.3.11.225 or even specify the IP address instead of mail.cammy.com. The mail handlers will look for an MX record before using the A record. Unless you set the type to MX records, it won't show up when you do an nslookup.

This should allow you to separate the mail domain from the other domain.

 

[cammy]

This is further complicated by the fact that we use an external mail filtering company for incoming email. Our MX records therefore point to their IP's and not ours.

Outbound mail is sent directly from us and rDNS points back to us thereby keeping other peoples spam filters happy.

Cheers

Cammy