Re: direct queries of reverse zone, [not] using CNAME hack - DNS

This is a discussion on Re: direct queries of reverse zone, [not] using CNAME hack - DNS ; On 27.08.08 11:25, Justin Pryzby wrote: > We have CIDR/29 reverse DNS delegated to us using the CNAME hack: > > > 109.216.80.206.in-addr.arpa is an alias for 109.104-111.216.80.206.in-addr.arpa. > > 109.104-111.216.80.206.in-addr.arpa domain name pointer athena.norchemlab.com. > > Every day we ...

+ Reply to Thread
Results 1 to 2 of 2

Thread: Re: direct queries of reverse zone, [not] using CNAME hack

  1. Re: direct queries of reverse zone, [not] using CNAME hack

    On 27.08.08 11:25, Justin Pryzby wrote:
    > We have CIDR/29 reverse DNS delegated to us using the CNAME hack:
    >
    > > 109.216.80.206.in-addr.arpa is an alias for 109.104-111.216.80.206.in-addr.arpa.
    > > 109.104-111.216.80.206.in-addr.arpa domain name pointer athena.norchemlab.com.

    >
    > Every day we get a few queries to our published nameservers not for the
    > 109.104-111.216... record, but for the 109.216...directly.

    [...]
    > Is that due to some broken nameservers that can't handle the CNAME or a PTR
    > with 6 components, a probe, or ??


    looking at that record, you seem to redirect those records to the domain
    104-111.216.80.206.in-addr.arpa. that is not visible from the net. At least
    authoritative nameservers for 216.80.206.in-addr.arpa. do not know anything
    about that domain. That delegation is broken. You must configure NS records
    for the 104-111.216.80.206.in-addr.arpa. domain to 216.80.206.in-addr.arpa.
    zone for the delegation to work

    --
    Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
    Warning: I wish NOT to receive e-mail advertising to this address.
    Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
    Support bacteria - they're the only culture some people have.


  2. Re: direct queries of reverse zone, [not] using CNAME hack

    In article ,
    Matus UHLAR - fantomas wrote:

    > On 27.08.08 11:25, Justin Pryzby wrote:
    > > We have CIDR/29 reverse DNS delegated to us using the CNAME hack:
    > >
    > > > 109.216.80.206.in-addr.arpa is an alias for
    > > > 109.104-111.216.80.206.in-addr.arpa.
    > > > 109.104-111.216.80.206.in-addr.arpa domain name pointer
    > > > athena.norchemlab.com.

    > >
    > > Every day we get a few queries to our published nameservers not for the
    > > 109.104-111.216... record, but for the 109.216...directly.

    > [...]
    > > Is that due to some broken nameservers that can't handle the CNAME or a PTR
    > > with 6 components, a probe, or ??

    >
    > looking at that record, you seem to redirect those records to the domain
    > 104-111.216.80.206.in-addr.arpa. that is not visible from the net. At least
    > authoritative nameservers for 216.80.206.in-addr.arpa. do not know anything
    > about that domain. That delegation is broken. You must configure NS records
    > for the 104-111.216.80.206.in-addr.arpa. domain to 216.80.206.in-addr.arpa.
    > zone for the delegation to work


    I see the delegation:

    ; <<>> DiG 9.4.2-P1 <<>> 104-111.216.80.206.in-addr.arpa ns
    @authns1.mpls.qwest.net +norec
    ;; global options: printcmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61707
    ;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;104-111.216.80.206.in-addr.arpa. IN NS

    ;; AUTHORITY SECTION:
    104-111.216.80.206.in-addr.arpa. 43200 IN NS ns.norchemlab.com.
    104-111.216.80.206.in-addr.arpa. 43200 IN NS ns1.norchemlab.com.

    --
    Barry Margolin, barmar@alum.mit.edu
    Arlington, MA
    *** PLEASE don't copy me on replies, I'll read them in the group ***


+ Reply to Thread