Reverse DNS troubles

Hi,

I'm having trouble getting our network to do reverse-dns lookups correctly. I'll try to explain a bit.

We registered two DNS machines at Network Solutions. We set up our master and slave machines, and can do forward lookups with no problems. We are using a big ISP to provide bandwidth to us- through the router that they provided. I am wondering if they need to set us up as authoritative for our domain name. The reason that I draw this conclusion is that I CAN do reverse lookups on the local area. However, outside the router and from another network, I cannot. My point is that I think that the host name is not getting resolved into an IP because of something between an outside network and my DNS machines. In short;

-inside LAN (reverse DNS lookups work)
-outside LAN (reverse DNS do NOT work)

Thank You
LVL 2
xybxAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

td_milesCommented:
When you talk about "reverse-dns" you are meaning resolving an IP address to a domain name ? EG.


# dig -x 139.130.4.4

;; ANSWER SECTION:
4.4.130.139.in-addr.arpa. 86383 IN      PTR     uneeda.telstra.net.


??

If you are talking about reverse lookup in this sense, then yes, your ISP needs to delegate you as authorative for the reverse DNS of IP subnet they have allocated to you. You should be aware that you can only delegate on the Class boundaries for reverse DNS, so that if you got less than a /24  (ie. Class C) IP address allocation, then they can't delegate the reverse DNS to you. If this is the case you will have to get them to manually add the entries for the IP addresses that you have and require set up.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
xybxAuthor Commented:
Hey, I appreciate it. I have read that information in one form or another, but you said it the way I needed to hear it.

We do have only a subset of a Class C. You wrote "..you will have to get them to manually add the entries for the IP addresses that you have and require set up." Does this mean we'll have to get them to add each domain we want reverse DNS for (We have a ton), or just the IP address?

Thanks

0
td_milesCommented:
You may have multiple domains, but the number of IP addresses that you have is limited. All you need to do is talk to the right person (at your ISP) and say "here is a list of our server names & IP addresses, can you setup the reverse DNS for them", then give them a list that looks something like:

1.1.1.1 = www.domain.com
1.1.1.2 = mail.domain.com
1.1.1.3 = www.domain2.com
1.1.1.4 = sql.domain2.com

If you are doing virtual IP hosting (ie. hosting multiple domain websites on a single IP address) then a stack of the IP addresses will all be the same.

They will then add the above entries to their DNS for the zone  "1.1.1.in-addr.arpa." (in my above example) and you should then be able to resolve your IP addresses to the names of the servers that are running on them.

Some mail servers only accept connections from servers where they can do a reverse DNS lookup to verify that the server is who it says it is (as determined by DNS). As such, it is getting more important to have reverse DNS setup or else some things don't work.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.