Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Re: Are Reverse Lookup Zones REquired?

0 views
Skip to first unread message

Roger Abell

unread,
Aug 5, 2004, 7:40:03 AM8/5/04
to
You are evidently speaking of public IPs and not of use for
Active Directory support (?)
If the IPs are already in a reverse zone (done by your ISP)
then you cannot even make a reverse zone that covers them.
If you are using public IPs and your ISP has told you how
to interact with the way that they have delegated control of
the reverse PTR records to you, then you could set them up.
There is no standard way to do this if you are not the registered
controller of the entire IP range set (subnet).

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA
"HoTShoT" <@> wrote in message
news:%23XWqbBl...@tk2msftngp13.phx.gbl...
> I forgot to mention that our ISP has reverse DNS entries for our IP's for
> email purposes.
>
>


Roger Abell

unread,
Aug 5, 2004, 7:40:51 AM8/5/04
to
required - no ; good to have - yes

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

"HoTShoT" <@> wrote in message news:eXJMU1ke...@tk2msftngp13.phx.gbl...
> I just migrated everything from Windows 2003 SBS to a Windows 2003 machine
> that is not running as a DC. I used DNS dump to import all the entries.
>
> Since the reverse lookup was in active directory it does not appear on the
> new server.
>
> Is the reverse lookup zone required? We didn't really even have any PTR
> records in there anyway except one pointing to the machine itself.
>
> There are a lot of web sites on the new server and I'm afraid to changed
the
> IP's on our nameservers at our registrar until I figure this out.
>
> I did go in each of the DNS Forward zones and change the IP's on the
> nameservers www mail etc and that is ready.
>
> thanks in advance!
>
>


Ace Fekay [MVP]

unread,
Aug 5, 2004, 11:15:07 PM8/5/04
to
In news:%23XWqbBl...@tk2msftngp13.phx.gbl,
HoTShoT <@> made a post then I commented below

> I forgot to mention that our ISP has reverse DNS entries for our IP's
> for email purposes.

Just to add to Roger's reply, I've seen Event ID 40961 SPGNO errors that go
away when creating a revese zone for you internal subnet. If you get these
errors, now you'll know how to fix it.

--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
--
=================================


Roger Abell

unread,
Aug 6, 2004, 3:42:59 AM8/6/04
to
Thanks Ace. Quite right.

Maybe some clarification for the OP . . .

When I stated that if these are public IPs one cannot set
up a reverse zone for them unless the ISP has prepared
for this and indicated how, what I had in mind was doing
it correctly so that the entire world would use the reverse
zone.
What you indicate as a way to work around errors due to
attempts to registar reverse records for public IPs is also
quite valid.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4) MCDBA

"Ace Fekay [MVP]"
<PleaseSubstituteMyActualFirstName&LastNa...@hotmail.com> wrote in
message news:OzhVbO2e...@TK2MSFTNGP10.phx.gbl...

Ace Fekay [MVP]

unread,
Aug 6, 2004, 10:34:32 PM8/6/04
to
In news:uVD4$i4eEH...@TK2MSFTNGP12.phx.gbl,
Roger Abell <mvpN...@asu.edu> made a post then I commented below

> Thanks Ace. Quite right.
>
> Maybe some clarification for the OP . . .
>
> When I stated that if these are public IPs one cannot set
> up a reverse zone for them unless the ISP has prepared
> for this and indicated how, what I had in mind was doing
> it correctly so that the entire world would use the reverse
> zone.
> What you indicate as a way to work around errors due to
> attempts to registar reverse records for public IPs is also
> quite valid.
>

Thanks and I agree about the public IPs, good clarification! Definitely an
ISP thing. He would definitely have to call them and see if they offer that,
which most do. Hope he doesn't have cable or ADSL!
:-)

Ace


0 new messages