question about reverse zones and nsupdate

Grant Taylor gtaylor at
Wed Jun 7 22:41:36 UTC 2017

On 06/07/2017 02:18 PM, kevin martin wrote:
> I have tried to setup a reverse zone as and perform 
> 'update add' commands sending addresses like 
> and and, in all cases, the update fails with 
> NOTZONE.  bind complains "update failed: update RR is outside zone 
> (NOTZONE)".  Just how "tight" does the arpa zone need to be?  what would 
> be IN zone in this case?  When I'm NOT using dynamic dns I have a zone 
> file that is ORIGIN and just post manual entries that look 
> like " PTR " and reverse 
> resolution works fine.

Low hanging fruit.  Make sure that you have the trailing dot on your 
qname so that it is fully qualified.  That prevents search domains from 
mucking with things that it thinks are unqualified.

Been there, done that.  Learned my lesson.

Grant. . . .
unix || die

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3717 bytes
Desc: S/MIME Cryptographic Signature
URL: <>

More information about the bind-users mailing list