Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

another classless IN-ADDR.ARPA delegation question

11 views
Skip to first unread message

Frank Joerdens

unread,
Nov 30, 2001, 10:43:17 AM11/30/01
to

I guess I'm stuck: Our ISP is supposed to delegate the zone

176/28.212.8.62.in-addr.arpa

to us, and it appears to be already configured (as far as I can tell
anyway, and that's what their hostmaster tells me) at their end:

----------------------- snip -----------------------
bender:~ # dig @ns.kkf.net 176/28.212.8.62.in-addr.arpa ns

; <<>> DiG 8.3 <<>> @ns.kkf.net 176/28.212.8.62.in-addr.arpa ns
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 4
;; QUERY SECTION:
;; 176/28.212.8.62.in-addr.arpa, type = NS, class = IN

;; ANSWER SECTION:
176/28.212.8.62.in-addr.arpa. 1D IN NS ns.archi-me-des.de.
176/28.212.8.62.in-addr.arpa. 1D IN NS ns.kkf.net.
176/28.212.8.62.in-addr.arpa. 1D IN NS ns2.kkf.net.
176/28.212.8.62.in-addr.arpa. 1D IN NS ns3.kkf.net.

;; ADDITIONAL SECTION:
ns.archi-me-des.de. 1H IN A 212.63.41.234
ns.kkf.net. 11h6m40s IN A 212.63.32.10
ns2.kkf.net. 11h6m40s IN A 212.63.40.10
ns3.kkf.net. 11h6m40s IN A 212.63.37.246

;; Total query time: 44 msec
;; FROM: bender to SERVER: ns.kkf.net 212.63.32.10
;; WHEN: Fri Nov 30 18:34:18 2001
;; MSG SIZE sent: 46 rcvd: 202
----------------------- snap -----------------------

The box under my control is ns.archi-me-des.de, the others are at the
provider's end. My named.conf entry is:

----------------------- snip -----------------------
zone "176/28.212.8.62.IN-ADDR.ARPA" {
type master;
file "28_176.212.8.62.zone";
};
----------------------- snap -----------------------

And the zone file itself is:

----------------------- snip -----------------------
bender:~ # cat /var/named/28_176.212.8.62.zone
$TTL 3600
@ IN SOA ns.archi-me-des.de. frank.joerdens.de. (
2001113003 ; serial YYYYMMDDnn
86400 ; refresh ( 24 hours)
7200 ; retry ( 2 hours)
3600000 ; expire (1000 hours)
172800 ) ; minimum ( 2 days)
;
; nameserver:
;
NS ns.archi-me-des.de.
NS ns2.kkf.net.
NS ns3.kkf.net.

190 PTR ns.archi-me-des.de.
----------------------- snap -----------------------

Which means that, as I understand the mechanism, the IP address
62.8.212.190 should resolve to ns.archi-me-des.de. But it doesn't:

----------------------- snip -----------------------
bender:~ # dig @localhost -x 62.8.212.190

; <<>> DiG 8.3 <<>> @localhost -x
; (1 server found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3
;; QUERY SECTION:
;; 190.212.8.62.in-addr.arpa, type = ANY, class = IN

;; ANSWER SECTION:
190.212.8.62.in-addr.arpa. 18h35m2s IN CNAME 190.176/28.212.8.62.in-addr.arpa.

;; AUTHORITY SECTION:
212.8.62.in-addr.arpa. 2d10h1m6s IN NS ns.kkf.net.
212.8.62.in-addr.arpa. 2d10h1m6s IN NS ns2.kkf.net.
212.8.62.in-addr.arpa. 2d10h1m6s IN NS ns3.kkf.net.

;; ADDITIONAL SECTION:
ns.kkf.net. 5h41m42s IN A 212.63.32.10
ns2.kkf.net. 23h47m33s IN A 212.63.40.10
ns3.kkf.net. 23h47m33s IN A 212.63.37.246

;; Total query time: 8 msec
;; FROM: bender to SERVER: localhost 127.0.0.1
;; WHEN: Fri Nov 30 18:28:01 2001
;; MSG SIZE sent: 43 rcvd: 176
----------------------- snap -----------------------

Can anyone explain? My guess would be that the CNAME entries in the
provider's zone file, like

190 CNAME 190.176/28.212.8.62.in-addr.arpa.

are missing.

Many thanks in advance,

Frank

Barry Margolin

unread,
Nov 30, 2001, 1:45:46 PM11/30/01
to
In article <9u89el$p...@pub3.rc.vix.com>,

Frank Joerdens <fr...@joerdens.de> wrote:
>Which means that, as I understand the mechanism, the IP address
>62.8.212.190 should resolve to ns.archi-me-des.de. But it doesn't:
>
>----------------------- snip -----------------------
>bender:~ # dig @localhost -x 62.8.212.190
>
>; <<>> DiG 8.3 <<>> @localhost -x
>; (1 server found)
>;; res options: init recurs defnam dnsrch
>;; got answer:
>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
>;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3
>;; QUERY SECTION:
>;; 190.212.8.62.in-addr.arpa, type = ANY, class = IN
>
>;; ANSWER SECTION:
>190.212.8.62.in-addr.arpa. 18h35m2s IN CNAME 190.176/28.212.8.62.in-addr.arpa.
....

>
>Can anyone explain? My guess would be that the CNAME entries in the
>provider's zone file, like
>
>190 CNAME 190.176/28.212.8.62.in-addr.arpa.
>
>are missing.

Why do you say that? The response you got above clearly shows that CNAME
record.

Since you didn't specify a record type in your dig query, it defaulted to
ANY, which returned the CNAME record rather than following the alias. Try
"dig -x 62.8.212.190 ptr" and you should get the answer you expect:

; <<>> DiG 8.3 <<>> -x ptr

;; res options: init recurs defnam dnsrch
;; got answer:

;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 3, ADDITIONAL: 3
;; QUERY SECTION:
;; 190.212.8.62.in-addr.arpa, type = PTR, class = IN

;; ANSWER SECTION:
190.212.8.62.in-addr.arpa. 23h57m42s IN CNAME 190.176/28.212.8.62.in-addr.arpa.
190.176/28.212.8.62.in-addr.arpa. 57m36s IN PTR ns.archi-me-des.de.

;; AUTHORITY SECTION:
176/28.212.8.62.in-addr.arpa. 57m36s IN NS ns.archi-me-des.de.
176/28.212.8.62.in-addr.arpa. 57m36s IN NS ns2.kkf.net.
176/28.212.8.62.in-addr.arpa. 57m36s IN NS ns3.kkf.net.

;; ADDITIONAL SECTION:
ns.archi-me-des.de. 57m23s IN A 212.63.41.234
ns2.kkf.net. 1d23h56m52s IN A 212.63.40.10
ns3.kkf.net. 1d23h56m52s IN A 212.63.37.246

;; Total query time: 13 msec
;; FROM: tools.genuity.com to SERVER: default -- 4.2.2.1
;; WHEN: Fri Nov 30 13:39:06 2001
;; MSG SIZE sent: 43 rcvd: 205

However, the first time I tried this I got a SERVFAIL error. It appears
that the servers ns.kkf.net, ns2.kkf.net, and ns3.kkf.net don't have the
zone loaded; either they're not configured as slave servers or they've been
unable to transfer the zone from the master server.

--
Barry Margolin, bar...@genuity.net
Genuity, Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.

0 new messages