Most specific match on PTR records

Nikita Koshikov koshikov at gmail.com
Fri Feb 22 09:33:10 UTC 2013


Thanks Mark, for elegant solution. It works. Thanks.

On Fri, Feb 22, 2013 at 1:49 AM, Mark Andrews <marka at isc.org> wrote:

>
> In message <CANYsE-zYQh7Jv4QoVM45q-w1Vz1=YBk7j=K=
> OoQ01UGYvw_yLw at mail.gmail.com>, Nikita Koshiko
> v writes:
> > Hello list,
> >
> >
> > I'm trying to "cut" /24 network from the scope of /8 network, here is
> > example:
> >
> >         zone "11.2.10.in-addr.arpa" {
> >                 type forward;
> >                 forwarders { 192.168.1.23; 192.168.1.24; };
> >         };
> >
> >         zone "10.in-addr.arpa" {
> >                 type master;
> >                 file "master/int/10.in-addr.arpa";
> >         };
> >
> > 10.in-addr.arpa is just a file that returns NXDOMAIN for any 10.0.0.0/8ip
> > address. But I need to forward requests for 10.2.11.0/24 net to other
> dns
> > servers and the above config not working.
> > I got empty responses for 10.2.11.0/24 net.
>
> When I see questions like this I ask "Why are you doing this the
> most complicated way?"  Just add a delegation for 11.2.10.in-addr.arpa
> to 10.in-addr.arpa.  If you are using global forwarders turn them
> off.
>
>         zone "10.in-addr.arpa" {
>                 type master;
>                 file "master/int/10.in-addr.arpa";
>                 forwarders { /* empty */ };
>         };
>
>         11.2    NS  <nameserver1>.
>         11.2    NS  <nameserver2>.
>
> > This is right: (192.168.1.8 - server with bind)
> >
> > $ host -t ptr 10.1.1.1 192.168.1.8
> > Using domain server:
> > Name: 192.168.1.8
> > Address: 192.168.1.8#53
> > Aliases:
> > Host 1.1.1.10.in-addr.arpa. not found: 3(NXDOMAIN)
> >
> > This is wrong:
> > $ host -t ptr 10.2.11.10  192.168.1.8
> > Using domain server:
> > Name: 192.168.1.8
> > Address: 192.168.1.8#53
> > Aliases:
> > Host 10.11.2.10.in-addr.arpa. not found: 3(NXDOMAIN)
> >
> > This is expected answer from the forwarded server  - 192.168.1.23
> > $ host -t ptr 10.2.11.10  192.168.1.23
> > Using domain server:
> > Name: 192.168.1.23
> > Address: 192.168.1.23#53
> > Aliases:
> > 10.11.2.10.in-addr.arpa domain name pointer hawk-agent.local.intranet.
> >
> > Can someone help with this ?
> >
> --
> Mark Andrews, ISC
> 1 Seymour St., Dundas Valley, NSW 2117, Australia
> PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20130222/1d660fd8/attachment.html>


More information about the bind-users mailing list