<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 12 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="color:#1F497D">> > On Tue, 13 Oct 2015 21:40:30 +0100,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > Paul A wrote:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > I have a few /24 that I want to delegate using DNAME.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > Are you expecting to save yourself trouble by doing so?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > If not, you should probably reconsider.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > If you decide DNAME is a useful trick, bear in mind that what DNAME<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > does is not really delegation, but just a trick for the lazy. I'm<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > actually one of those lazy people, so please understand that I don't<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > mean the word offensively. Besides, cleverer people than I have<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > recognized laziness as a virtue.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > I have persuaded the administrator of the<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > 1.0.0.7.7.0.1.0.0.2.ip6.arpa. zone to use a DNAME rather than a<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > delegation for f.3.1.0.0.7.7.0.1.0.0.2.ip6.arpa. Yes, this is for<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > IPv6, but it's conveniently to hand, and the principles are the<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > same. I have actually had second thoughts about this, and more than<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > once, but never felt worried enough that making the change needed<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > priority before the other things on my do-list.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> Niall, apologies I am new to the mailing list and am still getting acclimated.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> I agree with the consensus a few /24s are handled much easier via standard<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> delegation than via RFC2317.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> I am confused about your example. It would seem a simple delegation would<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> work in this scenario assuming you are running bind and are admin on the<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> nameserver. The way I see it appending '.arpa.' to the PTR's owner would<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> negate the need for the DNAME style delegation but I confess my assumptions<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> could be off. Could you please explain your setup in more detail?<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Niall, please disregard my previous email. After giving this more thought it<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">would also require a second zone clause pointing to the same file and still<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">be treated (i.e. transfer) as separate zones which could get messy.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">John<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> John<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > The trouble I save by doing this is that of maintaining two zone<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > files for my AAAA and corresponding PTR records. Instead, I can<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > keep both together in one file, like this:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > $ORIGIN no8.be.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > bode 3600 IN AAAA 2001:770:13f:0:5054:ff:fe00:d978<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > 8.7.9.d.0.0.e.f.f.f.0.0.4.5.0.5.0.0.0.0.f.3.1.0.0.7.7.0.1.0.0.2.ip6 3600 IN PTR
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > bode<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > Using 'dig', you can explore how it works, and what zones are<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > involved, by using commands such as these:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > dig bode.no8.be aaaa<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > dig -x 2001:770:13f:0:5054:ff:fe00:d978<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > dig +trace -x 2001:770:13f:0:5054:ff:fe00:d978<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > dig f.3.1.0.0.7.7.0.1.0.0.2.ip6.arpa ns<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > dig no8.be ns<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > You can do the same for your /24's, if the administrator of the<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > parent reverse zone is minded to co-operate. Alternatively,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > you can use a normal delegation and set up your zone as follows,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > filling in the gaps appropriately.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > $TTL 3600 ;; or whatever<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > $ORIGIN 13.168.192.in-addr.arpa.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > @ IN SOA ...<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > IN NS ...<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > IN DNAME whatever.example.net.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > Then, you populate the whatever.example.net. zone with the PTR records:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > $TTL 3600 ;; or whatever<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > $ORIGIN whatever.example.net.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > @ IN SOA ...<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > IN NS ...<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > 0 IN PTR base-addr.whatever-else.example.net.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > 1 IN PTR some-host.whatever-else.example.net.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > 2 IN PTR anor-host.whatever-else.example.net.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > ;; and so on ...<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > 255 IN PTR bcast-addr.whatever-else.example.net.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > Lets says I have 192.168.13.0/24 how would I go about doing reserve on<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > the forwarding server using DNAME.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > Currently on the forwarding server I have
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > NS ns.isp.com<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > ;;<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > DNAME 0/24<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > Don't be distracted by RFC2317. It describes the trickery you need<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > when you're dealing with a longer prefix (fewer addresses) than a<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > /24. If you have "a few /24", you can deal with them without<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > needing any of that.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > ;;<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > ;;; delegate to server<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > 0/24 NS ns.someserver.com.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > On the server handling the PTRs (ns.someserver.com) I have:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > zone "0/24.13.168.192.IN-ADDR.ARPA" {<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > type master;<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > file "/slvdb/db.13.168.192";<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > };<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > In the PTR server the zone file looks like a normal PTR file and when<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > I query on this server its working, I get the DNAME/CNAME and PTR.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > However when I query on the forwarding server it’s not working, I just<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > keep getting the CNAME over and over again but not actual PTR.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > I'm not sure what in what sense you're using the term "forwarding<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > server".<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > If you mean the authoritative server where the DNAME record is sitting,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > then I believe that this is normal. An authoritative server should<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > return just the DNAME and synthesized CNAME, as it's not responsible<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > for chasing down the CNAME reference. That's the job of a recursive<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > resolver.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > Shouldn’t the forwarding server query the PTR server since it has a<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > 0/24 NS RR? It seems like because of the above DNAME RR it expects and<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > > zone file for the 0/24. However I just want to forward this.
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > I'm sorry. I don't understand what you think you're trying to achieve.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > I hope this helps.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > <o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > Best regards,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">> > Niall O'Reilly<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:#1F497D">><o:p> </o:p></span></p>
</div>
<center>This communication is the property of CenturyLink and may contain confidential or privileged information. Unauthorized use of this communication is strictly prohibited and may be unlawful. If you have received this communication in error, please immediately
notify the sender by reply e-mail and destroy all copies of the communication and any attachments.</center>
</body>
</html>