Date: Wed, 10 Nov 1999 19:50:43 +0100 From: Thierry Herbelot <thierry.herbelot@alcatel.fr> To: questions <questions@freebsd.org> Subject: How to get a reverse DNS mapping for a 10.x network ? (repost, with new info) Message-ID: <3829BE83.395E2464@alcatel.fr>
next in thread | raw e-mail | index | archive | help
This is a multi-part message in MIME format.
--------------CCC398CC89B009F529527620
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Hello,
I run a small platform where there are about 30 PCs, all on the same
10.0.1.x subnet (according to the RFC-1918).
I have a translating gateway (using FreeBSD and nat) to the internal
enterprise network, where "standard", legal IP addresses are used.
I have set up a DNS for my internal network, which can forward queries
to the enterprise DNS server (as all outgoing packets go through natd,
this allows people in the inside network to surf the intranet and mount
NFS partitions from outside NFS servers).
My problem is that I cannot get the reverse mapping to work : I have set
up named with two files for direct and reverse mappings and only the
direct mapping works. From what I've read in the named doc, I may have
to create a "root server" for the 10.x.y.z (10.in-addr.arpa zone), but,
so far I haven't foud how to do it.
Any taker ?
TfH
PS : this on FreeBSD 3.2-R, using named 8.1.2
quick'n dirty network drawing :
enterprise nat-ing inside (other
network -- gateway --(10.0.1.x subnet)--DNS server-- PCs)
--------------CCC398CC89B009F529527620
Content-Type: text/plain; charset=us-ascii;
name="0.1.0.10.in-addr.arpa"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="0.1.0.10.in-addr.arpa"
@ IN SOA pc-snmp1.telspace.alcatel.fr. root.pc-snmp1.telspace.alcatel.fr. (
1999110902 ; Serial
3600 ; Refresh
900 ; Retry
3600000 ; Expire
3600 ) ; Minimum
IN NS pc-snmp1.telspace.alcatel.fr.
; IN A 255.255.255.0
$ORIGIN 1.0.10.in-addr.arpa.
100 IN PTR pc-bsd100.val.telspace.alcatel.fr.
101 IN PTR pc-bsd101.val.telspace.alcatel.fr.
102 IN PTR pc-bsd102.val.telspace.alcatel.fr.
103 IN PTR pc-bsd103.val.telspace.alcatel.fr.
104 IN PTR pc-bsd104.val.telspace.alcatel.fr.
105 IN PTR pc-bsd105.val.telspace.alcatel.fr.
106 IN PTR pc-bsd106.val.telspace.alcatel.fr.
107 IN PTR pc-bsd107.val.telspace.alcatel.fr.
108 IN PTR pc-bsd108.val.telspace.alcatel.fr.
109 IN PTR pc-bsd109.val.telspace.alcatel.fr.
110 IN PTR pc-bsd110.val.telspace.alcatel.fr.
111 IN PTR pc-bsd111.val.telspace.alcatel.fr.
150 IN PTR pc-bsd150.val.telspace.alcatel.fr.
151 IN PTR pc-bsd151.val.telspace.alcatel.fr.
--------------CCC398CC89B009F529527620
Content-Type: text/plain; charset=us-ascii;
name="localhost.rev"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="localhost.rev"
; From: @(#)localhost.rev 5.1 (Berkeley) 6/30/90
; $Id: PROTO.localhost.rev,v 1.4 1997/05/01 21:02:37 ache Exp $
;
; This file is automatically edited by the `make-localhost' script in
; the /etc/namedb directory.
;
@ IN SOA pc-snmp1.telspace.alcatel.fr. root.pc-snmp1.telspace.alcatel.fr. (
1999110801 ; Serial
3600 ; Refresh
900 ; Retry
3600000 ; Expire
3600 ) ; Minimum
IN NS pc-snmp1.telspace.alcatel.fr.
1 IN PTR localhost.val.telspace.alcatel.fr.
--------------CCC398CC89B009F529527620
Content-Type: text/plain; charset=us-ascii;
name="named.conf"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="named.conf"
// $Id: named.conf,v 1.5 1998/12/23 06:06:13 dillon Exp $
//
// Refer to the named(8) man page for details. If you are ever going
// to setup a primary server, make sure you've understood the hairy
// details of how DNS is working. Even with simple mistakes, you can
// break connectivity for affected parties, or cause huge amount of
// useless Internet traffic.
options {
directory "/etc/namedb";
// In addition to the "forwarders" clause, you can force your name
// server to never initiate queries of its own, but always ask its
// forwarders only, by enabling the following line:
//
// forward only;
// If you've got a DNS server around at your upstream provider, enter
// its IP address here, and enable the line below. This will make you
// benefit from its cache, thus reduce overall DNS traffic in the Internet.
forwarders {
155.132.144.33;
155.132.51.4;
};
/*
* If there is a firewall between you and nameservers you want
* to talk to, you might need to uncomment the query-source
* directive below. Previous versions of BIND always asked
* questions using port 53, but BIND 8.1 uses an unprivileged
* port by default.
*/
query-source address * port 53;
/*
* If running in a sandbox, you may have to specify a different
* location for the dumpfile.
*/
// dump-file "s/named_dump.db";
};
// Note: the following will be supported in a future release.
/*
host { any; } {
topology {
127.0.0.0/8;
};
};
*/
// Setting up secondaries is way easier and the rough picture for this
// is explained below.
//
// If you enable a local name server, don't forget to enter 127.0.0.1
// into your /etc/resolv.conf so this server will be queried first.
// Also, make sure to enable it in /etc/rc.conf.
zone "." {
type hint;
file "named.root";
};
zone "0.0.127.IN-ADDR.ARPA" {
type master;
file "localhost.rev";
};
zone "val.telspace.alcatel.fr" {
type master;
file "val.telspace.alcatel.fr";
};
zone "0.1.0.10.in-addr.arpa" {
type master;
file "0.1.0.10.in-addr.arpa";
};
--------------CCC398CC89B009F529527620
Content-Type: text/plain; charset=us-ascii;
name="named.root"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="named.root"
; This file holds the information on root name servers needed to
; initialize cache of Internet domain name servers
; (e.g. reference this file in the "cache . <file>"
; configuration file of BIND domain name servers).
;
; This file is made available by InterNIC registration services
; under anonymous FTP as
; file /domain/named.root
; on server FTP.RS.INTERNIC.NET
; -OR- under Gopher at RS.INTERNIC.NET
; under menu InterNIC Registration Services (NSI)
; submenu InterNIC Registration Archives
; file named.root
;
; last update: Aug 22, 1997
; related version of root zone: 1997082200
;
;
; formerly NS.INTERNIC.NET
;
. 3600000 IN NS A.ROOT-SERVERS.NET.
A.ROOT-SERVERS.NET. 3600000 A 198.41.0.4
;
; formerly NS1.ISI.EDU
;
. 3600000 NS B.ROOT-SERVERS.NET.
B.ROOT-SERVERS.NET. 3600000 A 128.9.0.107
;
; formerly C.PSI.NET
;
. 3600000 NS C.ROOT-SERVERS.NET.
C.ROOT-SERVERS.NET. 3600000 A 192.33.4.12
;
; formerly TERP.UMD.EDU
;
. 3600000 NS D.ROOT-SERVERS.NET.
D.ROOT-SERVERS.NET. 3600000 A 128.8.10.90
;
; formerly NS.NASA.GOV
;
. 3600000 NS E.ROOT-SERVERS.NET.
E.ROOT-SERVERS.NET. 3600000 A 192.203.230.10
;
; formerly NS.ISC.ORG
;
. 3600000 NS F.ROOT-SERVERS.NET.
F.ROOT-SERVERS.NET. 3600000 A 192.5.5.241
;
; formerly NS.NIC.DDN.MIL
;
. 3600000 NS G.ROOT-SERVERS.NET.
G.ROOT-SERVERS.NET. 3600000 A 192.112.36.4
;
; formerly AOS.ARL.ARMY.MIL
;
. 3600000 NS H.ROOT-SERVERS.NET.
H.ROOT-SERVERS.NET. 3600000 A 128.63.2.53
;
; formerly NIC.NORDU.NET
;
. 3600000 NS I.ROOT-SERVERS.NET.
I.ROOT-SERVERS.NET. 3600000 A 192.36.148.17
;
; temporarily housed at NSI (InterNIC)
;
. 3600000 NS J.ROOT-SERVERS.NET.
J.ROOT-SERVERS.NET. 3600000 A 198.41.0.10
;
; housed in LINX, operated by RIPE NCC
;
. 3600000 NS K.ROOT-SERVERS.NET.
K.ROOT-SERVERS.NET. 3600000 A 193.0.14.129
;
; temporarily housed at ISI (IANA)
;
. 3600000 NS L.ROOT-SERVERS.NET.
L.ROOT-SERVERS.NET. 3600000 A 198.32.64.12
;
; housed in Japan, operated by WIDE
;
. 3600000 NS M.ROOT-SERVERS.NET.
M.ROOT-SERVERS.NET. 3600000 A 202.12.27.33
; End of File
--------------CCC398CC89B009F529527620
Content-Type: text/plain; charset=us-ascii;
name="val.telspace.alcatel.fr"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
filename="val.telspace.alcatel.fr"
$ORIGIN val.telspace.alcatel.fr.
@ IN SOA val.telspace.alcatel.fr. root.pc-snmp1.telspace.alcatel.fr. (
1999110903 ;serial
10800 ;refresh
3600 ; retry
3600000 ; expire
86400 ) ; minimum
IN NS pc-snmp1.telspace.alcatel.fr.
localhost IN A 127.0.0.1
pc-bsd100 IN A 10.0.1.100
pc-bsd101 IN A 10.0.1.101
pc-bsd102 IN A 10.0.1.102
pc-bsd103 IN A 10.0.1.103
pc-bsd104 IN A 10.0.1.104
pc-bsd105 IN A 10.0.1.105
pc-bsd106 IN A 10.0.1.106
pc-bsd107 IN A 10.0.1.107
pc-bsd108 IN A 10.0.1.108
pc-bsd109 IN A 10.0.1.109
pc-bsd110 IN A 10.0.1.110
pc-bsd111 IN A 10.0.1.111
pc-bsd150 IN A 10.0.1.150
pc-bsd151 IN A 10.0.1.151
--------------CCC398CC89B009F529527620--
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3829BE83.395E2464>