Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 04 Apr 2008 16:59:01 -0400
From:      Jon Radel <jon@radel.com>
To:        John Almberg <jalmberg@identry.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Tinydns configuration... works, but no reverse dns
Message-ID:  <47F69695.8010606@radel.com>
In-Reply-To: <3D3F9F03-11A2-46CB-9E1D-B469181B024A@identry.com>
References:  <3D3F9F03-11A2-46CB-9E1D-B469181B024A@identry.com>

next in thread | previous in thread | raw e-mail | index | archive | help

This is a cryptographically signed message in MIME format.

--------------ms080601070902050404070806
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

John Almberg wrote:
> 
> I am using tinydns on my FreeBSD server. Normal DNS lookups work fine,
> but I can't get reverse DNS to work.
> 
> My colocation provider says they have delegated DNS to my name servers.
> If there is a way to independently verify this, I don't know how to do
> it, so I am taking their word for it.

I'm a bind guy myself, so I can't answer to your tinydns configuration,
but as to how to independently verify delegation, I find the following
handy:

freesparky# dig +trace -x 66.111.0.194

; <<>> DiG 9.4.2 <<>> +trace -x 66.111.0.194
;; global options:  printcmd
.                       112878  IN      NS      A.ROOT-SERVERS.NET.
.                       112878  IN      NS      B.ROOT-SERVERS.NET.
.                       112878  IN      NS      C.ROOT-SERVERS.NET.
.                       112878  IN      NS      D.ROOT-SERVERS.NET.
.                       112878  IN      NS      E.ROOT-SERVERS.NET.
.                       112878  IN      NS      F.ROOT-SERVERS.NET.
.                       112878  IN      NS      G.ROOT-SERVERS.NET.
.                       112878  IN      NS      H.ROOT-SERVERS.NET.
.                       112878  IN      NS      I.ROOT-SERVERS.NET.
.                       112878  IN      NS      J.ROOT-SERVERS.NET.
.                       112878  IN      NS      K.ROOT-SERVERS.NET.
.                       112878  IN      NS      L.ROOT-SERVERS.NET.
.                       112878  IN      NS      M.ROOT-SERVERS.NET.
;; Received 272 bytes from 216.143.151.3#53(216.143.151.3) in 13 ms

66.in-addr.arpa.        86400   IN      NS      indigo.ARIN.NET.
66.in-addr.arpa.        86400   IN      NS      BASIL.ARIN.NET.
66.in-addr.arpa.        86400   IN      NS      henna.ARIN.NET.
66.in-addr.arpa.        86400   IN      NS      dill.ARIN.NET.
66.in-addr.arpa.        86400   IN      NS      figwort.ARIN.NET.
66.in-addr.arpa.        86400   IN      NS      chia.ARIN.NET.
66.in-addr.arpa.        86400   IN      NS      epazote.ARIN.NET.
;; Received 194 bytes from 2001:dc3::35#53(M.ROOT-SERVERS.NET) in 107 ms

0.111.66.in-addr.arpa.  86400   IN      NS      auth1.ns.nyi.net.
0.111.66.in-addr.arpa.  86400   IN      NS      auth2.ns.nyi.net.
;; Received 93 bytes from 192.42.93.32#53(figwort.ARIN.NET) in 94 ms

194.0.111.66.in-addr.arpa. 86400 IN     NS      ns1.identry.com.
194.0.111.66.in-addr.arpa. 86400 IN     NS      ns2.identry.com.
194.0.111.66.in-addr.arpa. 86400 IN     NS      ns3.identry.com.
;; Received 140 bytes from 64.90.175.14#53(auth1.ns.nyi.net) in 16 ms

dig: couldn't get address for 'ns3.identry.com': not found



which does bring up the issue of why you refer to ns0 and ns1 in your
question and your provider delegates to ns1, ns2, and ns3, the last of
which doesn't appear to have an A record anywhere useful.

A retry, using a different NS record this time:

.....trimmed....
194.0.111.66.in-addr.arpa. 86400 IN     NS      ns1.identry.com.
194.0.111.66.in-addr.arpa. 86400 IN     NS      ns2.identry.com.
194.0.111.66.in-addr.arpa. 86400 IN     NS      ns3.identry.com.
;; Received 140 bytes from 64.90.175.14#53(auth1.ns.nyi.net) in 23 ms

194.0.111.66.in-addr.arpa. 3600 IN      PTR     on.identry.com.
0.111.66.in-addr.arpa.  259200  IN      NS      ns0.0.111.66.in-addr.arpa.
0.111.66.in-addr.arpa.  259200  IN      NS      ns1.0.111.66.in-addr.arpa.
;; Received 107 bytes from 66.111.0.253#53(ns1.identry.com) in 17 ms

The PTR record looks reasonable, but those NS records...well.  ;-)

--Jon Radel

--------------ms080601070902050404070806
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms080601070902050404070806--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?47F69695.8010606>