From owner-freebsd-questions@FreeBSD.ORG Fri Apr 4 21:59:46 2008 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9864D106566B for ; Fri, 4 Apr 2008 21:59:46 +0000 (UTC) (envelope-from jon@radel.com) Received: from wave.radel.com (wave.radel.com [216.143.151.4]) by mx1.freebsd.org (Postfix) with ESMTP id 03B428FC19 for ; Fri, 4 Apr 2008 21:59:45 +0000 (UTC) (envelope-from jon@radel.com) Received: by wave.radel.com (CommuniGate Pro PIPE 4.1.6) with PIPE id 7477416; Fri, 04 Apr 2008 16:59:31 -0400 Received: from [192.168.43.221] (account jon@radel.com HELO braeburn.local) by wave.radel.com (CommuniGate Pro SMTP 4.1.6) with ESMTP-TLS id 7477414; Fri, 04 Apr 2008 16:59:14 -0400 Message-ID: <47F69695.8010606@radel.com> Date: Fri, 04 Apr 2008 16:59:01 -0400 From: Jon Radel User-Agent: Thunderbird 2.0.0.12 (Macintosh/20080213) MIME-Version: 1.0 To: John Almberg References: <3D3F9F03-11A2-46CB-9E1D-B469181B024A@identry.com> In-Reply-To: <3D3F9F03-11A2-46CB-9E1D-B469181B024A@identry.com> X-Enigmail-Version: 0.95.3 Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms080601070902050404070806" X-Radel.com-MailScanner-Information: Please contact Jon for more information X-Radel.com-MailScanner: Found to be clean X-Mailer: CommuniGate Pro CLI mailer Cc: freebsd-questions@freebsd.org Subject: Re: Tinydns configuration... works, but no reverse dns X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 04 Apr 2008 21:59:46 -0000 This is a cryptographically signed message in MIME format. --------------ms080601070902050404070806 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit John Almberg wrote: > > I am using tinydns on my FreeBSD server. Normal DNS lookups work fine, > but I can't get reverse DNS to work. > > My colocation provider says they have delegated DNS to my name servers. > If there is a way to independently verify this, I don't know how to do > it, so I am taking their word for it. I'm a bind guy myself, so I can't answer to your tinydns configuration, but as to how to independently verify delegation, I find the following handy: freesparky# dig +trace -x 66.111.0.194 ; <<>> DiG 9.4.2 <<>> +trace -x 66.111.0.194 ;; global options: printcmd . 112878 IN NS A.ROOT-SERVERS.NET. . 112878 IN NS B.ROOT-SERVERS.NET. . 112878 IN NS C.ROOT-SERVERS.NET. . 112878 IN NS D.ROOT-SERVERS.NET. . 112878 IN NS E.ROOT-SERVERS.NET. . 112878 IN NS F.ROOT-SERVERS.NET. . 112878 IN NS G.ROOT-SERVERS.NET. . 112878 IN NS H.ROOT-SERVERS.NET. . 112878 IN NS I.ROOT-SERVERS.NET. . 112878 IN NS J.ROOT-SERVERS.NET. . 112878 IN NS K.ROOT-SERVERS.NET. . 112878 IN NS L.ROOT-SERVERS.NET. . 112878 IN NS M.ROOT-SERVERS.NET. ;; Received 272 bytes from 216.143.151.3#53(216.143.151.3) in 13 ms 66.in-addr.arpa. 86400 IN NS indigo.ARIN.NET. 66.in-addr.arpa. 86400 IN NS BASIL.ARIN.NET. 66.in-addr.arpa. 86400 IN NS henna.ARIN.NET. 66.in-addr.arpa. 86400 IN NS dill.ARIN.NET. 66.in-addr.arpa. 86400 IN NS figwort.ARIN.NET. 66.in-addr.arpa. 86400 IN NS chia.ARIN.NET. 66.in-addr.arpa. 86400 IN NS epazote.ARIN.NET. ;; Received 194 bytes from 2001:dc3::35#53(M.ROOT-SERVERS.NET) in 107 ms 0.111.66.in-addr.arpa. 86400 IN NS auth1.ns.nyi.net. 0.111.66.in-addr.arpa. 86400 IN NS auth2.ns.nyi.net. ;; Received 93 bytes from 192.42.93.32#53(figwort.ARIN.NET) in 94 ms 194.0.111.66.in-addr.arpa. 86400 IN NS ns1.identry.com. 194.0.111.66.in-addr.arpa. 86400 IN NS ns2.identry.com. 194.0.111.66.in-addr.arpa. 86400 IN NS ns3.identry.com. ;; Received 140 bytes from 64.90.175.14#53(auth1.ns.nyi.net) in 16 ms dig: couldn't get address for 'ns3.identry.com': not found which does bring up the issue of why you refer to ns0 and ns1 in your question and your provider delegates to ns1, ns2, and ns3, the last of which doesn't appear to have an A record anywhere useful. A retry, using a different NS record this time: .....trimmed.... 194.0.111.66.in-addr.arpa. 86400 IN NS ns1.identry.com. 194.0.111.66.in-addr.arpa. 86400 IN NS ns2.identry.com. 194.0.111.66.in-addr.arpa. 86400 IN NS ns3.identry.com. ;; Received 140 bytes from 64.90.175.14#53(auth1.ns.nyi.net) in 23 ms 194.0.111.66.in-addr.arpa. 3600 IN PTR on.identry.com. 0.111.66.in-addr.arpa. 259200 IN NS ns0.0.111.66.in-addr.arpa. 0.111.66.in-addr.arpa. 259200 IN NS ns1.0.111.66.in-addr.arpa. ;; Received 107 bytes from 66.111.0.253#53(ns1.identry.com) in 17 ms The PTR record looks reasonable, but those NS records...well. ;-) --Jon Radel --------------ms080601070902050404070806 Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIJMTCC AvMwggJcoAMCAQICEG2TkfF/93Sx9LCftry1D3YwDQYJKoZIhvcNAQEFBQAwYjELMAkGA1UE BhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNVBAMT I1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA4MDMyNDE2NTkyMVoX DTA5MDMyNDE2NTkyMVowXjEOMAwGA1UEBBMFUmFkZWwxEzARBgNVBCoTCkpvbiBUaG9tYXMx GTAXBgNVBAMTEEpvbiBUaG9tYXMgUmFkZWwxHDAaBgkqhkiG9w0BCQEWDWpvbkByYWRlbC5j b20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdCxQufreHHDAI9YN2axx87Rf 0TK1PYFMlJHi4y1ebdAMPqR6M44bz+3m8YnKn1bmIf7dWyisWyAIQYCOhW/2r66o4MdF9qJ9 z5uhMy+28zaJP/Glg64C3WPM0VfveCgvu+ApEyf2JDbjc/hUomw8KpppgOcn1wX6PZGbhHVv eAvDTWJ0ugqo08Ny6GR0bsGvePmxdWSQq+0aGTHqA1I2EozJBZ8W5xlUtKe22j56i1Uw1ujk Rlosdu2PTs8QOY1OUHuLPnEV9EWtYF7g6bXDUDsJxypXZy9qTipPplYXjdWgkLVRvezri+BN kgin8UKhKLQ99vS25zrMFKu80g31AgMBAAGjKjAoMBgGA1UdEQQRMA+BDWpvbkByYWRlbC5j b20wDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOBgQAR4u9o4CFvztyo0sZb3tCQIWYb 5U4jW9da3goVwWIkMz+qeCb2kiTQfsSmOdF9YJ8VTRdYW0l0fQbqL5JikVhaYeX85cpqZ3iA /PPJpfPtJw8g5jJOAROVAvxydMZXQYxyIBMV4HNG3qir44YnyfmJXkBtRFYWdxBc7bQpoZSZ jzCCAvMwggJcoAMCAQICEG2TkfF/93Sx9LCftry1D3YwDQYJKoZIhvcNAQEFBQAwYjELMAkG A1UEBhMCWkExJTAjBgNVBAoTHFRoYXd0ZSBDb25zdWx0aW5nIChQdHkpIEx0ZC4xLDAqBgNV BAMTI1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBJc3N1aW5nIENBMB4XDTA4MDMyNDE2NTky MVoXDTA5MDMyNDE2NTkyMVowXjEOMAwGA1UEBBMFUmFkZWwxEzARBgNVBCoTCkpvbiBUaG9t YXMxGTAXBgNVBAMTEEpvbiBUaG9tYXMgUmFkZWwxHDAaBgkqhkiG9w0BCQEWDWpvbkByYWRl bC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdCxQufreHHDAI9YN2axx 87Rf0TK1PYFMlJHi4y1ebdAMPqR6M44bz+3m8YnKn1bmIf7dWyisWyAIQYCOhW/2r66o4MdF 9qJ9z5uhMy+28zaJP/Glg64C3WPM0VfveCgvu+ApEyf2JDbjc/hUomw8KpppgOcn1wX6PZGb hHVveAvDTWJ0ugqo08Ny6GR0bsGvePmxdWSQq+0aGTHqA1I2EozJBZ8W5xlUtKe22j56i1Uw 1ujkRlosdu2PTs8QOY1OUHuLPnEV9EWtYF7g6bXDUDsJxypXZy9qTipPplYXjdWgkLVRvezr i+BNkgin8UKhKLQ99vS25zrMFKu80g31AgMBAAGjKjAoMBgGA1UdEQQRMA+BDWpvbkByYWRl bC5jb20wDAYDVR0TAQH/BAIwADANBgkqhkiG9w0BAQUFAAOBgQAR4u9o4CFvztyo0sZb3tCQ IWYb5U4jW9da3goVwWIkMz+qeCb2kiTQfsSmOdF9YJ8VTRdYW0l0fQbqL5JikVhaYeX85cpq Z3iA/PPJpfPtJw8g5jJOAROVAvxydMZXQYxyIBMV4HNG3qir44YnyfmJXkBtRFYWdxBc7bQp oZSZjzCCAz8wggKooAMCAQICAQ0wDQYJKoZIhvcNAQEFBQAwgdExCzAJBgNVBAYTAlpBMRUw EwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEaMBgGA1UEChMRVGhh d3RlIENvbnN1bHRpbmcxKDAmBgNVBAsTH0NlcnRpZmljYXRpb24gU2VydmljZXMgRGl2aXNp b24xJDAiBgNVBAMTG1RoYXd0ZSBQZXJzb25hbCBGcmVlbWFpbCBDQTErMCkGCSqGSIb3DQEJ ARYccGVyc29uYWwtZnJlZW1haWxAdGhhd3RlLmNvbTAeFw0wMzA3MTcwMDAwMDBaFw0xMzA3 MTYyMzU5NTlaMGIxCzAJBgNVBAYTAlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAo UHR5KSBMdGQuMSwwKgYDVQQDEyNUaGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBD QTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAxKY8VXNV+065yplaHmjAdQRwnd/p/6Me 7L3N9VvyGna9fww6YfK/Uc4B1OVQCjDXAmNaLIkVcI7dyfArhVqqP3FWy688Cwfn8R+RNiQq E88r1fOCdz0Dviv+uxg+B79AgAJk16emu59l0cUqVIUPSAR/p7bRPGEEQB5kGXJgt/sCAwEA AaOBlDCBkTASBgNVHRMBAf8ECDAGAQH/AgEAMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9j cmwudGhhd3RlLmNvbS9UaGF3dGVQZXJzb25hbEZyZWVtYWlsQ0EuY3JsMAsGA1UdDwQEAwIB BjApBgNVHREEIjAgpB4wHDEaMBgGA1UEAxMRUHJpdmF0ZUxhYmVsMi0xMzgwDQYJKoZIhvcN AQEFBQADgYEASIzRUIPqCy7MDaNmrGcPf6+svsIXoUOWlJ1/TCG4+DYfqi2fNi/A9BxQIJNw PP2t4WFiw9k6GX6EsZkbAMUaC4J0niVQlGLH2ydxVyWN3amcOY6MIE9lX5Xa9/eH1sYITq72 6jTlEBpbNU1341YheILcIRk13iSx0x1G/11fZU8xggNkMIIDYAIBATB2MGIxCzAJBgNVBAYT AlpBMSUwIwYDVQQKExxUaGF3dGUgQ29uc3VsdGluZyAoUHR5KSBMdGQuMSwwKgYDVQQDEyNU aGF3dGUgUGVyc29uYWwgRnJlZW1haWwgSXNzdWluZyBDQQIQbZOR8X/3dLH0sJ+2vLUPdjAJ BgUrDgMCGgUAoIIBwzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEP Fw0wODA0MDQyMDU5MDFaMCMGCSqGSIb3DQEJBDEWBBQFIYYzxXyFzrStSjBrBgYq8/PSmTBS BgkqhkiG9w0BCQ8xRTBDMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0D AgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCBhQYJKwYBBAGCNxAEMXgwdjBiMQswCQYD VQQGEwJaQTElMCMGA1UEChMcVGhhd3RlIENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UE AxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIElzc3VpbmcgQ0ECEG2TkfF/93Sx9LCftry1 D3YwgYcGCyqGSIb3DQEJEAILMXigdjBiMQswCQYDVQQGEwJaQTElMCMGA1UEChMcVGhhd3Rl IENvbnN1bHRpbmcgKFB0eSkgTHRkLjEsMCoGA1UEAxMjVGhhd3RlIFBlcnNvbmFsIEZyZWVt YWlsIElzc3VpbmcgQ0ECEG2TkfF/93Sx9LCftry1D3YwDQYJKoZIhvcNAQEBBQAEggEAgr1L ZO467LiOcURvhRYjvD4VKiFRTMwdKqxKj+BTV5AGrPgphFTHn2evaytcTXOPmbBR+qluQMyP YAZTGSyPR2mzf+3iC126XaYhYqKC6WNRP2pMjH8Wssel2l/o20EM1G4DjrDLSPd0gfRvOMqc cFFS/YyVMCiB9+XOWO9ZwHlHU2vPRHcfGfdS1prflpaZKw4axDc+bf8zEQx1TZOLVh8ocSkM qAGtQuYvr0UxsYGvdRpkdY0rvIvUuXGThv+A57VUbFP97Km0yV0sVVLq1oydzgCFjiI1g/SJ WyvVniMwePJ/+9DYJae3x+kXxR0xUR2noSW2KleJVJkO/KSsgwAAAAAAAA== --------------ms080601070902050404070806--