Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Delegate Reverse Zone

Status
Not open for further replies.

Cedrick

MIS
Jun 17, 2002
17
US
Hi, I'm trying to delegate a full Class C (10.15.0.0/24) reverse zone on RedHat Ent4/Bind 9.3. Here's the zone file definition in named.conf:

zone "0.15.10.in-addr.arpa" {
type master;
file "internal/named.10.15rev";
};

Here's the contents of named.10.15rev:

$TTL 86400 ; 1 day
@ IN SOA ns1.domain.com. root.ns1.domain.com. (
2010021102 ; serial
3600 ; refresh
300 ; retry
360000 ; expire
86400) ; minimum


$ORIGIN 0.15.10.IN-ADDR.ARPA.
@ IN NS ns2.domain.com.

55 IN CNAME 55.0.15.10.IN-ADDR.ARPA.

66 IN PTR test.domain.com.


I can dig 10.15.0.66 just fine:
; <<>> DiG 9.3.2 <<>> @ns1.domain.com -x 10.15.0.66
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 288
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;66.0.15.10.in-addr.arpa. IN PTR

;; ANSWER SECTION:
66.0.15.10.in-addr.arpa. 86400 IN PTR test.domain.com.

;; AUTHORITY SECTION:
0.15.10.in-addr.arpa. 86400 IN NS ns2.domain.com.

;; ADDITIONAL SECTION:
ns2.domain.com 3600 IN A 10.1.16.130

;; Query time: 0 msec
;; SERVER: 10.1.16.130#53(10.1.16.130)
;; WHEN: Thu Feb 11 16:07:43 2010
;; MSG SIZE rcvd: 102

But if I dig 10.15.0.55, the AUTHORITY flag returns 0 as if it doesn't see the $ORIGIN statement in the zone file:

; <<>> DiG 9.3.2 <<>> @ns1.domain.com -x 10.15.0.55
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 323
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;55.0.15.10.in-addr.arpa. IN PTR

;; ANSWER SECTION:
55.0.15.10.in-addr.arpa. 86400 IN CNAME 55.0.15.10.in-addr.arpa.

;; Query time: 0 msec
;; SERVER: 10.1.16.130#53(10.1.16.130)
;; WHEN: Thu Feb 11 16:12:52 2010
;; MSG SIZE rcvd: 55

Any ideas? Thanks in advance.
 
I started out trying to delegate the entire 10.15.0.0/16 network with the same results using this def. in named.conf:

zone "15.10.in-addr.arpa" {
type master;
file "internal/named.10.15rev";
};

And this in the zone file:

$ORIGIN 15.10.IN-ADDR.ARPA.
@ IN NS ns2.domain.com.

55.0 IN CNAME 55.0.15.10.IN-ADDR.ARPA.

66.0 IN PTR test.domain.com.
 

There are 2 ways to do this. One is the classical method,
which I prefer if you control the top level:

IN 15.10.in-addr.arpa:

0 in NS ns1.domain.com.

IN 0.15.10.in-add.arpa of ns1:

66 IN PTR test.domain.com.

The other is a CNAME trick that ISPs use so they can split
up the zone. They take a namein in-addr.arpa. space and delegate that space to your server.

I don't use this method much, but it does work.
 
Oh, BTW, with the CNAME method you
would STILL need to delegate the namespace to
ns1.

 
Got it. Thank you very much, I really appreciate it.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top