Solved

Reverse DNS for host with multiple IPs

Posted on 2009-04-15
4
672 Views
Last Modified: 2012-05-06
Correct me if I'm wrong, but I thought setting up reverse DNS for hosts with multiple IPs is pretty straightforward?

We have one customer that has 2 ADSL lines with 2 different suppliers and an internal mail server.  There are two A records setup for their mail server hostname pointing to the two different IPs.  Each supplier has setup reverse DNS entries for each IP resolving to the same hostname.  This has all worked fine for over a year.

Now one of the lines has been switched to a different supplier and their hostmaster is telling me it's not possible to setup rDNS for a host that has two forward lookup IPs??

I quote

"A single A record has to point to a single IP address, you cannot have mail.yourdomain.com pointing at 2 different IP addresses it just will not work."

That is true - a single A record has to point to a single IP.  But there's no reason why there can't be two A records for the same hostname right?

Or am I going senile?
0
Comment
Question by:devon-lad
  • 2
  • 2
4 Comments
 
LVL 70

Expert Comment

by:Chris Dent
ID: 24149891

You're not senile. There's no real reason a PTR record cannot point to an A record acting as part of a Round Robin set (multiple A records for a single name resource).

It's all fine as long as your network kit is capable of coping with the connections coming in on two different IPs, I assume it is if you've been running that successfully.

Chris
0
 
LVL 1

Author Comment

by:devon-lad
ID: 24150414
Thanks for that Chris.

And there's no reason why rDNS cannot be setup so that two different IPs with two different suppliers resolve to the same hostname, right?

I'm thinking it must be ok, because this is what we've had for the past year or so.

Need to find a link to something official that says the above in a nutshell, because this guy is not listening to me.
0
 
LVL 70

Accepted Solution

by:
Chris Dent earned 500 total points
ID: 24151565

It comes under RFC 1912 (http://www.ietf.org/rfc/rfc1912.txt) which makes the following recommendation:

   Make sure your PTR and A records match.  For every IP address, there
   should be a matching PTR record in the in-addr.arpa domain.  If a
   host is multi-homed, (more than one IP address) make sure that all IP
   addresses have a corresponding PTR record (not just the first one).

Your system in this instance is multi-homed so to conform to that recommendation it must have a PTR record for each IP, pointing back to the same name (because it is the same host).

We can resort to Wikipedia for the rest, because it describes FCrDNS which is used in some instances (rather than just a ReverseDNS check). This process is not defined in an RFC so it's about as good as we get.

http://en.wikipedia.org/wiki/Forward_Confirmed_reverse_DNS

Paying special attention to the highlighted "any":

> For each domain name mentioned in the PTR records, a regular DNS lookup is done to see
> if **any** of the A or AAAA records match the original IP address

He won't need Round Robin proving for the forward lookup as well will he?

Chris
0
 
LVL 1

Author Comment

by:devon-lad
ID: 24155400
Ah, that will do it.

Thanks Chris
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I will assume you are running a non-server version of some sort of Windows throughout this article. There are many flavors of Windows since Windows Server 2000 - 2008, XP Home & Pro, Vista Home & Pro, and Windows 7 Starter, Home, Pro, Ultimate, etc.…
I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now