Home / server / Questions / 260079
Accepted
ethrbunny
Asked: 2011-04-16 04:42:57 +0800 CST

BIND: one forward, multiple reverse?

  • 772

How do I deal with the case where a domain has addresses in more than one subnet?

EG: (bob.com)

joe.bob.com    A  14400  10.20.0.10  
jim.bob.com    A  14400  10.20.0.11  
mary.bob.com   A  14400  10.20.1.10  
susan.bob.com  A  14400  10.20.1.11

(0.20.10.in-addr.arpa) 

0.20.10.in-addr.arpa    14400   NS    bob.com  
0.20.10.in-addr.arpa    14400   PTR   blahblahblah   
10                      14400   PTR   joe  
11                      14400   PTR   jim

(1.20.10.in-addr.arpa) 

1.20.10.in-addr.arpa    14400   NS    bob.com  
1.20.10.in-addr.arpa    14400   PTR   blahblahblah   
10                      14400   PTR   mary  
11                      14400   PTR   susan

I have my 'forward' zone file setup - seems like I need multiple 'reverse' files though.

zone "bob.com" {
    type: master;
    etcetc
};

zone "0.20.10.in-addr.arpa" {
    type: master;
    etcetc
};

zone "1.20.10.in-addr.arpa" {
    type: master;
    etcetc
};

Can I put both of these entries in named.conf on the same machine or do I have to break it up somehow between multiple files / machines?

domain-name-system bind dns-zone

3 Answers

  1. Best Answer

    You do not need to worry about subnets when it comes to the reverse domain lookup. You should setup your files in a way that makes sense for you. Are you going to have many machines? Can you put them all in one file? If that is the case, simply let the reverse lookup 10.20.. addresses and then list the addresses in this file.

    [named.conf.local]

    zone "20.10.in-addr.arpa" {
    type master;
    file "/etc/bind/db.10.20";
    allow-query { internal; };
};

    [db.10.20]

    $ORIGIN 20.10.in-addr.arpa.
$TTL 1W
@                       1D IN SOA       bob.com. root.bob.com. (
                                        2011020501      ; serial
                                        3H              ; refresh
                                        15M             ; retry
                                        1W              ; expiry
                                        1D )            ; minimum

                        1D IN NS        ns.bob.com.
10.0                     PTR     joe.bob.com.
10.1                     PTR     mary.bob.com.
    • 7

  2. You will need multiple files for your reverse lookup tables, one per subnet, but there is no need to do any machine based splitting. It looks like you are already on track for that.

    • 2

  3. It will ultimately depend on how those subnets are delegated for reverse DNS. If they're in private IP space you and slice and dice however you want as long as the authoritative server is configured to answer them. If you're talking about public IP space, then the upstream IP provider may have to delegate them as individual subnets and in that case it would be prudent to configure your DNS server the same way they're delegating them.

    • 0