LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 04-06-2009, 02:08 PM   #31
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032

My bad!!! You miss the priority of the MX record
Here is your new db.xx.xx.xx.xx
Code:
$TTL 86400
$ORIGIN 113/29.xx.xx.xxx.in-addr.arpa.
@ IN SOA mail.maydomain.com. root.maydomain.com. (
11 ; Serial Must be increased after every change
28800  ; Refresh
7200 ; Retry
604800 ; Expire
86400 ) ; Negative Cache TTL
 IN NS mail.mydomain.com.
 IN MX 10 mail.mydomain.com.

118 IN PTR mail.mydomain.com.
 
Old 04-06-2009, 02:30 PM   #32
jcvalim
Member
 
Registered: Apr 2009
Location: Brazil
Distribution: Debian
Posts: 47

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by bathory View Post
My bad!!! You miss the priority of the MX record
Here is your new db.xx.xx.xx.xx
Code:
$TTL 86400
$ORIGIN 113/29.xx.xx.xxx.in-addr.arpa.
@ IN SOA mail.maydomain.com. root.maydomain.com. (
11 ; Serial Must be increased after every change
28800  ; Refresh
7200 ; Retry
604800 ; Expire
86400 ) ; Negative Cache TTL
 IN NS mail.mydomain.com.
 IN MX 10 mail.mydomain.com.

118 IN PTR mail.mydomain.com.
mail:~# named-checkzone -d 113/29.xx.xx.xxx.in-addr.arpa. /etc/bind/db.118.xx.xx.xxx
loading "113/29.xx.xx.xxx.in-addr.arpa." from "/etc/bind/db.118.xx.xx.xxx" class "IN"
/etc/bind/db.118.xx.xx.xxx:10: 113/29.xx.xx.xxx.in-addr.arpa: bad owner name (check-names)
zone 113/29.xx.xx.xxx.in-addr.arpa/IN: loaded serial 11


mail:~# nslookup mail.mydomain.com
Server: 127.0.0.1
Address: 127.0.0.1#53

Name: mail.mydomain.com
Address: xxx.xx.xx.118

mail:~# nslookup xxx.xx.xx.118
Server: 10.0.0.1
Address: 10.0.0.1#53

** server can't find 118.xx.xx.xxx.in-addr.arpa: NXDOMAIN

Sorry is bothering you, but I must conclude that to turn my mail server...

Thanks.
 
Old 04-06-2009, 05:21 PM   #33
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
Quote:
/etc/bind/db.118.xx.xx.xxx:10: 113/29.xx.xx.xxx.in-addr.arpa: bad owner name (check-names)
Did you remove the "check-names ignore;" from named.conf?
The fact is that your bind version does not like the "/" in the zone name, but should not complain using the option above. I don't have this problem using 9.6.0-P1 with my reverse zone 0/28.x.x.x and in fact I don't recall this behavior the last 3ys using different bind versions.
Contact again your ISP and ask him if you can use just 113.xx.xx.xx.in-addr.arpa for the zone name. If you can, then do the necessary changes in named.conf and in db.xx.xx.xx and try again.
Or you can upgrade your bind version and see if it works.
Quote:
mail:~# nslookup xxx.xx.xx.118
Server: 10.0.0.1
Address: 10.0.0.1#53
Another thing to note is that the response for the reverse lookup is from 10.0.0.1 and not from localhost, assuming you ran the 2 nslookups from the same box. Use dig, so you can control the name server to use:
Code:
dig mail.mydomain.com @127.0.0.1
dig -x 118.xx.xx.xx @127.0.0.1
 
Old 04-07-2009, 09:24 AM   #34
jcvalim
Member
 
Registered: Apr 2009
Location: Brazil
Distribution: Debian
Posts: 47

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by bathory View Post
Did you remove the "check-names ignore;" from named.conf?
The fact is that your bind version does not like the "/" in the zone name, but should not complain using the option above. I don't have this problem using 9.6.0-P1 with my reverse zone 0/28.x.x.x and in fact I don't recall this behavior the last 3ys using different bind versions.
Contact again your ISP and ask him if you can use just 113.xx.xx.xx.in-addr.arpa for the zone name. If you can, then do the necessary changes in named.conf and in db.xx.xx.xx and try again.
Or you can upgrade your bind version and see if it works.

Another thing to note is that the response for the reverse lookup is from 10.0.0.1 and not from localhost, assuming you ran the 2 nslookups from the same box. Use dig, so you can control the name server to use:
Code:
dig mail.mydomain.com @127.0.0.1
dig -x 118.xx.xx.xx @127.0.0.1

I didn't remove the "check-names" in the named.conf file is still there:

zone "113/29.xx.xx.xxx.in-addr.arpa"{
notify no;
type master;
check-names ignore;
file "/etc/bind/db.118.xx.xx.xxx";


I did the tests requested:



mail:~# dig @mail.mydomain.com 11-xxx.xx.xx.118.in-addr.arpa ns

; <<>> DiG 9.3.4-P1.1 <<>> @mail.mydomain.com 11-xxx.xx.xx.118.in-addr.arpa ns
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 11817
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;11-xxx.xx.xx.118.in-addr.arpa. IN NS

;; AUTHORITY SECTION:
xx.xx.xxx.in-addr.arpa. 9350 IN SOA ns4.telemar.net.br. root.ns4.telemar.net.br. 2008062401 21600 3600 1209600 432000

;; Query time: 0 msec
;; SERVER: xxx.xx.xx.118#53(xxx.xx.xx.118)
;; WHEN: Tue Apr 7 11:06:13 2009
;; MSG SIZE rcvd: 106


===========================================================================

mail:~# dig mail.mydomain.com @127.0.0.1

; <<>> DiG 9.3.4-P1.1 <<>> mail.mydomain.com @127.0.0.1
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19129
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;mail.mydomain.com. IN A

;; ANSWER SECTION:
mail.mydomain.com. 86400 IN A xxx.xx.xx.118

;; AUTHORITY SECTION:
mydomain.com. 86400 IN NS mail.mydomain.com.

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Apr 7 11:06:20 2009
;; MSG SIZE rcvd: 69


======================================================================

mail:~# dig -x xxx.xx.xx.118 @127.0.0.1

; <<>> DiG 9.3.4-P1.1 <<>> -x xxx.xx.xx.118 @127.0.0.1
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51534
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 3, ADDITIONAL: 3

;; QUESTION SECTION:
;xxx.xx.xx.118.in-addr.arpa. IN PTR

;; ANSWER SECTION:
xxx.xx.xx.118.in-addr.arpa. 3522 IN PTR i118-xx-xx-xxx.s10.a044.ap.plala.or.jp.

;; AUTHORITY SECTION:
18.17.118.in-addr.arpa. 3522 IN NS ns-tk062.ocn.ad.jp.
18.17.118.in-addr.arpa. 3522 IN NS dns-cz1.plala.or.jp.
18.17.118.in-addr.arpa. 3522 IN NS dns-cz2.plala.or.jp.

;; ADDITIONAL SECTION:
dns-cz1.plala.or.jp. 86321 IN A 210.153.1.164
dns-cz2.plala.or.jp. 86321 IN A 60.43.59.164
ns-tk062.ocn.ad.jp. 86321 IN A 202.234.232.206

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Apr 7 11:06:26 2009
;; MSG SIZE rcvd: 218

Last edited by jcvalim; 04-07-2009 at 12:53 PM.
 
Old 04-07-2009, 10:06 AM   #35
jcvalim
Member
 
Registered: Apr 2009
Location: Brazil
Distribution: Debian
Posts: 47

Original Poster
Rep: Reputation: 15
I think I should call TELEMAR company that is responsible for my network link. And they ask for the delegation of my DNS server so that it will resolve the name. What do you think that????
 
Old 04-07-2009, 03:28 PM   #36
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
Quote:
I think I should call TELEMAR company that is responsible for my network link. And they ask for the delegation of my DNS server so that it will resolve the name. What do you think that????
You should already have call them. I was continuously told you to do so, as they have to delegate you the subnet xx.xx.xx.113/29. From the dig output
Quote:
...
;; AUTHORITY SECTION:
xx.xx.xxx.in-addr.arpa. 9350 IN SOA ns4.telemar.net.br. root.ns4.telemar.net.br. 2008062401 21600 3600 1209600 432000
it's obvious that you don't have authority on this zone
 
Old 04-07-2009, 03:59 PM   #37
jcvalim
Member
 
Registered: Apr 2009
Location: Brazil
Distribution: Debian
Posts: 47

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by bathory View Post
You should already have call them. I was continuously told you to do so, as they have to delegate you the subnet xx.xx.xx.113/29. From the dig outputit's obvious that you don't have authority on this zone
I knew I had to call them, but I thought to talk with them, the server should first resolve the name internally.
And he is not doing it.

mail:~# dig xxx.xx.xx.118

; <<>> DiG 9.3.4-P1.1 <<>> xxx.xx.xx.118
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 28569
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;xxx.xx.xx.118. IN A

;; AUTHORITY SECTION:
. 10800 IN SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. 2009040701 1800 900 604800 86400

;; Query time: 84 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Apr 7 18:02:29 2009
;; MSG SIZE rcvd: 106


SEE IT HERE: status: NXDOMAIN

Last edited by jcvalim; 04-07-2009 at 04:01 PM.
 
Old 04-07-2009, 04:13 PM   #38
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
Quote:
I knew I had to call them, but I thought to talk with them, the server should first resolve the name internally.
And he is not doing it.

mail:~# dig xxx.xx.xx.118
If you want to use dig to do reverse lookups you need the "-x" option:
Code:
dig -x xxx.xx.xx.118
The fact that it's not resolving the ip, is because the xx.xx.xx.xx/24 authority (that is telemar.net.br) has not give you the authority over the xx.xx.xx.113/29 subnet.
 
Old 04-08-2009, 07:02 AM   #39
jcvalim
Member
 
Registered: Apr 2009
Location: Brazil
Distribution: Debian
Posts: 47

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by bathory View Post
My bad!!! You miss the priority of the MX record
Here is your new db.xx.xx.xx.xx
Code:
$TTL 86400
$ORIGIN 113/29.xx.xx.xxx.in-addr.arpa.
@ IN SOA mail.maydomain.com. root.maydomain.com. (
11 ; Serial Must be increased after every change
28800  ; Refresh
7200 ; Retry
604800 ; Expire
86400 ) ; Negative Cache TTL
 IN NS mail.mydomain.com.
 IN MX 10 mail.mydomain.com.

118 IN PTR mail.mydomain.com.
I go call for TELEMAR today to resolve that. So now I have a doubt, I was examining the files and appeared the following questions:

I need put the @ before the statements:

such as:

@ IN NS mail.mydmain.com.
@ IN MX 10 mail.mydmain.com.
www IN A xxx.xx.xx.114
118 IN PTR mail.mydmain.com.


Thanks.
 
Old 04-08-2009, 07:22 AM   #40
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
@ is the same as the ORIGIN and it's not necessary (specially if you have the ORIGIN defined). Only in the SOA record is needed.
So speak with your ISP, so they give you the delegation of your subnet chuck and if you have further questions I'll be glad to help.
Meanwhile consider upgrading bind, so it does not complain for the "/" in the in-addr.arpa zone name.

Regards
 
Old 04-08-2009, 07:35 AM   #41
jcvalim
Member
 
Registered: Apr 2009
Location: Brazil
Distribution: Debian
Posts: 47

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by bathory View Post
@ is the same as the ORIGIN and it's not necessary (specially if you have the ORIGIN defined). Only in the SOA record is needed.
So speak with your ISP, so they give you the delegation of your subnet chuck and if you have further questions I'll be glad to help.
Meanwhile consider upgrading bind, so it does not complain for the "/" in the in-addr.arpa zone name.

Regards
So please me a hint on how atulizar the BIND, because if I give the command apt-get install bind9 it will install the same I already have.

Thanks...
 
Old 04-08-2009, 07:44 AM   #42
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
I'm not familiar with debian and its flavours, but after a little search I found this. If this is not suit your debian version search the same site for other packages.
 
Old 04-08-2009, 08:01 AM   #43
jcvalim
Member
 
Registered: Apr 2009
Location: Brazil
Distribution: Debian
Posts: 47

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by bathory View Post
I'm not familiar with debian and its flavours, but after a little search I found this. If this is not suit your debian version search the same site for other packages.
These packages you showed me is for Debian lenny and I'm using Debian etch. I believe it will not serve...
 
Old 04-08-2009, 08:17 AM   #44
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 13,163
Blog Entries: 1

Rep: Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032Reputation: 2032
As I told you I'm not familiar with these debian versions. You can ask here at the LQ debian forum how to get the latest bind.
And you can always compile bind from source.
 
Old 04-08-2009, 08:28 AM   #45
jcvalim
Member
 
Registered: Apr 2009
Location: Brazil
Distribution: Debian
Posts: 47

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by bathory View Post
As I told you I'm not familiar with these debian versions. You can ask here at the LQ debian forum how to get the latest bind.
And you can always compile bind from source.
I'll see if I find something in the forum, but anyway thanks for helping me, and I hope to continue counting on your help.

Thanks....
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
anybody familiar with this error "Xlib: connection to ":0.0" refused by server" ? rajnivanza Linux - Newbie 3 03-22-2009 05:10 PM
Attempt to connect to Cups server."Server Error" richag77 Linux - Newbie 3 02-25-2008 07:31 AM
"Fatal server error. Caught signal 11, server aborting" please help ! Fear58 Linux - General 2 10-16-2007 10:33 PM
Apache Alias Returns 404 or "Cannot find server or DNS Error" The00Dustin Linux - Software 3 02-14-2006 12:44 PM
dns & apache server "need help installing" faustozabdi Linux - Software 1 01-03-2006 04:46 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 04:03 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration