Reverse delegation - refused on my DNS

Mark Andrews marka at isc.org
Fri Aug 21 00:14:15 UTC 2009


In message <001201ca21de$6eea36e0$4cbea4a0$@monnerie at is.it-management.at>, "Mi
chael Monnerie" writes:
> I'm still searching for the error.
> Also, sorry for the strangeness of the mail format, I used a webmail for =
> the last mails. This time it's Outlook, don't know if it's really any =
> better... at least not for correctly indenting old mail texts :-(
> 
> > 	Because you don't serve 164.69.212.in-addr.arpa and you
> > 	tried to access the cache. You should slave
> > 	164.69.212.in-addr.arpa so you have the CNAMEs locally.
> > 	This will also make the above dig directed at your server
> > 	work as the answer will come from the zone rather than
> > 	the cache.
> 
> I did that now, helps :-))
> =20
> > 	Note: the lookups are working remotely because interative
> > 	resolvers ask for 57.48-28.164.69.212.in-addr.arpa rather
> > 	that 57.164.69.212.in-addr.arpa as generated by the above
> > 	dig.
> 
> Ah, I get the point. I always tested from a remote side with
> dig @dns1.zmi.at -x 212.69.164.57
> but that didn't work as this is not an open resolver. Slaving the zone =
> as you suggested enables even these lookups to work now. I think it's =
> good, as it helps remote sites to debug DNS when hunting an error.
> 
> A plain
> dig -x 212.69.164.57
> also works, so, do I have an issue or is everything OK with my =
> configuration?
> 
> Thanks for all your help, to all three of you!
> mfg zmi
> 

All three servers are now answering which is good.

drugs:marka 10:11 {371} % dig +nssearch 48-28.164.69.212.in-addr.arpa
SOA ns4.zmi.at. hostmaster.ns4.zmi.at. 42 172800 14400 3628800 60 from server power4u.zmi.at in 2270 ms.
SOA ns4.zmi.at. hostmaster.ns4.zmi.at. 42 172800 14400 3628800 60 from server dns1.zmi.at in 1534 ms.
SOA ns4.zmi.at. hostmaster.ns4.zmi.at. 42 172800 14400 3628800 60 from server dns2.zmi.at in 357 ms.
drugs:marka 10:12 {372} % 

You do however have a delegation mismatch.

48-28.164.69.212.in-addr.arpa. 86400 IN NS      dns1.zmi.at.
48-28.164.69.212.in-addr.arpa. 86400 IN NS      dns2.zmi.at.
;; Received 91 bytes from 82.98.222.6#53(dns2.serico.de) in 717 ms

48-28.164.69.212.in-addr.arpa. 3600 IN  NS      power4u.zmi.at.
48-28.164.69.212.in-addr.arpa. 3600 IN  NS      dns2.zmi.at.
48-28.164.69.212.in-addr.arpa. 3600 IN  NS      dns1.zmi.at.
;; Received 161 bytes from 212.69.162.197#53(dns1.zmi.at) in 999 ms

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org



More information about the bind-users mailing list