I'm having a problem configuring a delegation. We have various /24s for which we provide PTR records. If I create a zone file for 188.134.63.in-addr.arpa and add PTR records, they resolve just fine. In other words, if this is my zone, I can resolve <a href="http://63.134.188.13">63.134.188.13</a>:<br>
<br><font size="1"><span style="font-family: courier new,monospace;">$TTL 6h</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">@ 345600 IN SOA <a href="http://dauth1.joink.com">dauth1.joink.com</a>. <a href="http://noc.joink.com">noc.joink.com</a>. (</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> 2009121524 ; Serial number</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> 86400 ; Refresh</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> 3600 ; Retry</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> 777600 ; Expire</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> 3600 ) ; Minimum TTL</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;"> IN NS <a href="http://dauth1.joink.com">dauth1.joink.com</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> IN NS <a href="http://dauth2.joink.com">dauth2.joink.com</a>.</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">13 IN PTR <a href="http://midwest1st.com">midwest1st.com</a>.</span></font><br>
<br>But that isn't what we want to do for this particular zone. We want to delegate all queries concerning 188.134.63.in-addr.arpa to <a href="http://ns1.midwestfirst.com">ns1.midwestfirst.com</a> and <a href="http://ns2.midwestfirst.com">ns2.midwestfirst.com</a>. Albitz & Liu 4th says that's fair game, so here's how I configured the zone:<br>
<br><font size="1"><span style="font-family: courier new,monospace;">$TTL 6h</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">@ 345600 IN SOA <a href="http://dauth1.joink.com">dauth1.joink.com</a>. <a href="http://noc.joink.com">noc.joink.com</a>. (</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> 2009121524 ; Serial number</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> 86400 ; Refresh</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> 3600 ; Retry</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> 777600 ; Expire</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> 3600 ) ; Minimum TTL</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> IN NS <a href="http://ns1.midwestfirst.com">ns1.midwestfirst.com</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"> IN NS <a href="http://ns2.midwestfirst.com">ns2.midwestfirst.com</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;"><br><br></span></font>Mutatis mutandis, that's the configuration that Albitz & Liu show for delegating forward lookup zones (p. 232). It isn't quite how they show reverse lookup zones (more on this in a moment), and unfortunately, it doesn't work:<br>
<font size="1"><br>[root@linux1 joink-domains]# dig -x 63.134.188.13 +trace<br><br>; <<>> DiG 9.2.1 <<>> -x 63.134.188.13 +trace<br>;; global options: printcmd<br>. 3600000 IN NS <a href="http://B.ROOT-SERVERS.NET">B.ROOT-SERVERS.NET</a>.<br>
. 3600000 IN NS <a href="http://M.ROOT-SERVERS.NET">M.ROOT-SERVERS.NET</a>.<br>. 3600000 IN NS <a href="http://K.ROOT-SERVERS.NET">K.ROOT-SERVERS.NET</a>.<br>
. 3600000 IN NS <a href="http://E.ROOT-SERVERS.NET">E.ROOT-SERVERS.NET</a>.<br>. 3600000 IN NS <a href="http://L.ROOT-SERVERS.NET">L.ROOT-SERVERS.NET</a>.<br>
. 3600000 IN NS <a href="http://A.ROOT-SERVERS.NET">A.ROOT-SERVERS.NET</a>.<br>. 3600000 IN NS <a href="http://J.ROOT-SERVERS.NET">J.ROOT-SERVERS.NET</a>.<br>
. 3600000 IN NS <a href="http://G.ROOT-SERVERS.NET">G.ROOT-SERVERS.NET</a>.<br>. 3600000 IN NS <a href="http://C.ROOT-SERVERS.NET">C.ROOT-SERVERS.NET</a>.<br>
. 3600000 IN NS <a href="http://F.ROOT-SERVERS.NET">F.ROOT-SERVERS.NET</a>.<br>. 3600000 IN NS <a href="http://H.ROOT-SERVERS.NET">H.ROOT-SERVERS.NET</a>.<br>
. 3600000 IN NS <a href="http://I.ROOT-SERVERS.NET">I.ROOT-SERVERS.NET</a>.<br>. 3600000 IN NS <a href="http://D.ROOT-SERVERS.NET">D.ROOT-SERVERS.NET</a>.<br>
;; Received 272 bytes from 12.109.94.5#53(12.109.94.5) in 1 ms<br><br>63.in-addr.arpa. 86400 IN NS <a href="http://DILL.ARIN.NET">DILL.ARIN.NET</a>.<br>63.in-addr.arpa. 86400 IN NS <a href="http://Y.ARIN.NET">Y.ARIN.NET</a>.<br>
63.in-addr.arpa. 86400 IN NS <a href="http://INDIGO.ARIN.NET">INDIGO.ARIN.NET</a>.<br>63.in-addr.arpa. 86400 IN NS <a href="http://Z.ARIN.NET">Z.ARIN.NET</a>.<br>63.in-addr.arpa. 86400 IN NS <a href="http://BASIL.ARIN.NET">BASIL.ARIN.NET</a>.<br>
63.in-addr.arpa. 86400 IN NS <a href="http://HENNA.ARIN.NET">HENNA.ARIN.NET</a>.<br>63.in-addr.arpa. 86400 IN NS <a href="http://X.ARIN.NET">X.ARIN.NET</a>.<br>;; Received 180 bytes from 192.228.79.201#53(<a href="http://B.ROOT-SERVERS.NET">B.ROOT-SERVERS.NET</a>) in 76 ms<br>
<br>188.134.63.in-addr.arpa. 86400 IN NS <a href="http://DAUTH1.JOINK.COM">DAUTH1.JOINK.COM</a>.<br>188.134.63.in-addr.arpa. 86400 IN NS <a href="http://DAUTH2.JOINK.COM">DAUTH2.JOINK.COM</a>.<br>;; Received 95 bytes from 192.35.51.32#53(<a href="http://DILL.ARIN.NET">DILL.ARIN.NET</a>) in 75 ms<br>
<br>188.134.63.in-addr.arpa. 3600 IN SOA <a href="http://dauth1.joink.com">dauth1.joink.com</a>. <a href="http://noc.joink.com">noc.joink.com</a>. 200 9121525 86400 3600 777600 3600<br>
;; Received 100 bytes from 63.134.128.150#53(<a href="http://DAUTH1.JOINK.COM">DAUTH1.JOINK.COM</a>) in 0 ms<br></font><br>As I said, this isn't quite how Albitz & Liu show delegation for reverse lookup zones. Nevertheless, the only difference that I see between what I have configured and what they show is that I'm working with 188.134.63.in-addr.arpa, while they're working one level higher, at the equivalent of 134.63.in-addr.arpa. Accordingly, they have to specify name servers for 188 within the zone, whereas I can (I had thought) inhereit that data from the zone. Maybe not, though, since it isn't working! <br>
<br>I even tried adding the "generate" command that they propose:<br><br><font style="font-family: courier new,monospace;" size="1">$TTL 6h<br>@ 345600 IN SOA <a href="http://dauth1.joink.com">dauth1.joink.com</a>. <a href="http://noc.joink.com">noc.joink.com</a>. (<br>
2009121526 ; Serial number<br> 86400 ; Refresh<br> 3600 ; Retry<br> 777600 ; Expire<br>
3600 ) ; Minimum TTL<br> IN NS <a href="http://ns1.midwestfirst.com">ns1.midwestfirst.com</a>.<br> IN NS <a href="http://ns2.midwestfirst.com">ns2.midwestfirst.com</a>.<br>
$GENERATE 1-255 IN NS <a href="http://ns1.midwestfirst.com">ns1.midwestfirst.com</a>.<br>$GENERATE 1-255 IN NS <a href="http://ns2.midwestfirst.com">ns2.midwestfirst.com</a>.</font><br>
<br>But no dice:<br><br><font size="1"><span style="font-family: courier new,monospace;">; <<>> DiG 9.2.1 <<>> -x 63.134.188.13 +trace</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">;; global options: printcmd</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">. 3600000 IN NS <a href="http://I.ROOT-SERVERS.NET">I.ROOT-SERVERS.NET</a>.</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">. 3600000 IN NS <a href="http://A.ROOT-SERVERS.NET">A.ROOT-SERVERS.NET</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">. 3600000 IN NS <a href="http://E.ROOT-SERVERS.NET">E.ROOT-SERVERS.NET</a>.</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">. 3600000 IN NS <a href="http://G.ROOT-SERVERS.NET">G.ROOT-SERVERS.NET</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">. 3600000 IN NS <a href="http://M.ROOT-SERVERS.NET">M.ROOT-SERVERS.NET</a>.</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">. 3600000 IN NS <a href="http://L.ROOT-SERVERS.NET">L.ROOT-SERVERS.NET</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">. 3600000 IN NS <a href="http://D.ROOT-SERVERS.NET">D.ROOT-SERVERS.NET</a>.</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">. 3600000 IN NS <a href="http://B.ROOT-SERVERS.NET">B.ROOT-SERVERS.NET</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">. 3600000 IN NS <a href="http://F.ROOT-SERVERS.NET">F.ROOT-SERVERS.NET</a>.</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">. 3600000 IN NS <a href="http://H.ROOT-SERVERS.NET">H.ROOT-SERVERS.NET</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">. 3600000 IN NS <a href="http://J.ROOT-SERVERS.NET">J.ROOT-SERVERS.NET</a>.</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">. 3600000 IN NS <a href="http://K.ROOT-SERVERS.NET">K.ROOT-SERVERS.NET</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">. 3600000 IN NS <a href="http://C.ROOT-SERVERS.NET">C.ROOT-SERVERS.NET</a>.</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">;; Received 228 bytes from 12.109.94.5#53(12.109.94.5) in 1 ms</span><br style="font-family: courier new,monospace;">
<br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">63.in-addr.arpa. 86400 IN NS <a href="http://HENNA.ARIN.NET">HENNA.ARIN.NET</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">63.in-addr.arpa. 86400 IN NS <a href="http://BASIL.ARIN.NET">BASIL.ARIN.NET</a>.</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">63.in-addr.arpa. 86400 IN NS <a href="http://DILL.ARIN.NET">DILL.ARIN.NET</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">63.in-addr.arpa. 86400 IN NS <a href="http://X.ARIN.NET">X.ARIN.NET</a>.</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">63.in-addr.arpa. 86400 IN NS <a href="http://INDIGO.ARIN.NET">INDIGO.ARIN.NET</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">63.in-addr.arpa. 86400 IN NS <a href="http://Z.ARIN.NET">Z.ARIN.NET</a>.</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">63.in-addr.arpa. 86400 IN NS <a href="http://Y.ARIN.NET">Y.ARIN.NET</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">;; Received 180 bytes from 192.36.148.17#53(<a href="http://I.ROOT-SERVERS.NET">I.ROOT-SERVERS.NET</a>) in 65 ms</span><br style="font-family: courier new,monospace;"><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">188.134.63.in-addr.arpa. 86400 IN NS <a href="http://DAUTH2.JOINK.COM">DAUTH2.JOINK.COM</a>.</span><br style="font-family: courier new,monospace;"><span style="font-family: courier new,monospace;">188.134.63.in-addr.arpa. 86400 IN NS <a href="http://DAUTH1.JOINK.COM">DAUTH1.JOINK.COM</a>.</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">;; Received 95 bytes from 192.26.92.32#53(<a href="http://HENNA.ARIN.NET">HENNA.ARIN.NET</a>) in 35 ms</span><br style="font-family: courier new,monospace;"><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">188.134.63.in-addr.arpa. 3600 IN SOA <a href="http://dauth1.joink.com">dauth1.joink.com</a>. <a href="http://noc.joink.com">noc.joink.com</a>. 2009121523 86400 3600 777600 3600</span><br style="font-family: courier new,monospace;">
<span style="font-family: courier new,monospace;">;; Received 100 bytes from 63.134.128.151#53(<a href="http://DAUTH2.JOINK.COM">DAUTH2.JOINK.COM</a>) in 0 ms</span></font><br><br>What really baffles me is that this worked for several hours yesterday, and apparently quit overnight. One option is just to change the delegation at ARIN, but we want to avoid that and in any event I'd like to know what the issue is. Any ideas on what I'm doing wrong?<br>
<br>-Simon<br>