Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Reverse DNS entries for IPv6 addresses are not working. Everything I've read on the subject says the following configuration should work:

In named.conf:

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.0.0.c.7.5.0.6.2.ip6.arpa" IN {
      type master;
      file "/var/lib/bind/ipv6reverse.hosts";
      allow-update { none; };
};

In /var/lib/bind/ipv6reverse.hosts:

$TTL 2d
$ORIGIN 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.0.0.c.7.5.0.6.2.IP6.ARPA.
@       IN      SOA     ns1.domain.ca.  hostmaster.domain.ca. (
            2011051104 ; serial
            1h      ; refresh
            1h      ; retry
            20d     ; expire
            2d      ; minimum
                            )
    IN      NS      ns1.domain.ca.
    IN      NS      ns2.domain.ca.

3.2.0.0.                IN      PTR     smtp.domain.ca.

When I try to do the reverse hostname lookup, I get the following error:

# host -6 2605:7c00:3::23 2605:7c00:3::11
Using domain server:
Name: 206.12.82.130
Address: ::ffff:206.12.82.130#53
Aliases: 

Host 3.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.0.0.0.0.0.c.7.5.0.6.2.ip6.arpa not found: 3(NXDOMAIN)

As far as I can tell, this should be found.

The syslog for bind has some rather cryptic entries that may be related:

May 12 10:28:57 www3 named[16018]:   validating @0xb253cf10: . SOA: no valid signature found
May 12 10:28:57 www3 named[16018]:   validating @0xb253cf10: . NSEC: no valid signature found
May 12 10:28:57 www3 named[16018]:   validating @0xb253cf10: org NSEC: no valid signature found
share|improve this question
add comment

1 Answer

up vote 3 down vote accepted

Oh Grr! There was a . at the end of 3.2.0.0. I swear I tried this 6 times over. Stupid syntax errors.

share|improve this answer
    
Snigger. IPv6 rDNS is a pain, isn't it. I'm getting used to the look, but it's UGLY! Since we can't subnet below a /64, why not have all the last 16 characters as one block rather than having to count dots? –  Richard Gadsden May 14 '11 at 14:19
    
Alternatively, we should all consider generating IPv6 rDNS programatically,e.g. using something like member.wide.ad.jp/~fujiwara/v6rev.html - this is much less error-prone than writing it out by hand. –  David North May 28 '11 at 9:44
    
Strange that I couldn't find that in Google. :) It wasn't from lack of trying either. –  Ernie May 31 '11 at 21:17
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.