I'm running some small ISP here and I own couple of IP ranges.
I have given a few public IP addresses to some of my customer and they are running mail servers on them. They have demanded me to add reverse DNS entries (PTR) for their IPs.
I have Bind running on my server. Can I add multiple PTR records in same server/same file?
IP range I own: 192.168.10.0/24
Customer A: 192.168.10.103
Customer B: 192.168.10.199
Customer C: 192.168.10.169
Customer D: 192.168.10.69
Thanks.
As you can see from this TLDP example you can have multiple PTR records in the same zone.
$TTL 3D
@ IN SOA yourdomain.com. root.yourdomain.com. (
199609206 ; Serial
28800 ; Refresh
7200 ; Retry
604800 ; Expire
86400) ; Minimum TTL
NS ns1.yourdomain.com.
NS ns2.yourdomain.net.
;
; Servers
;
1 PTR router.yourdomain.com.
2 PTR server.yourdomain.com.
;
; Customers
;
69 PTR mail.customerD.com.
103 PTR mail.customerA.com.
169 PTR mail.customerC.com.
199 PTR mail.customerB.com.
It is a good idea to put any IPs you allocate into your reverses file to avoid duplicates.
This looks good to me:
$ dig -x 103.249.240.224
; <<>> DiG 9.9.5-3ubuntu0.4-Ubuntu <<>> -x 103.249.240.224
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8551
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
;; QUESTION SECTION:
;224.240.249.103.in-addr.arpa. IN PTR
;; ANSWER SECTION:
224.240.249.103.in-addr.arpa. 1685 IN PTR mk.localhost-server.com.
;; ADDITIONAL SECTION:
mk.localhost-server.com. 21526 IN A 103.249.240.224
;; Query time: 2 msec
;; SERVER: 127.0.1.1#53(127.0.1.1)
;; WHEN: Wed Aug 19 09:53:51 PDT 2015
;; MSG SIZE rcvd: 99
$ dig mk.localhost-server.com
; <<>> DiG 9.9.5-3ubuntu0.4-Ubuntu <<>> mk.localhost-server.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61167
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;mk.localhost-server.com. IN A
;; ANSWER SECTION:
mk.localhost-server.com. 21520 IN A 103.249.240.224
;; Query time: 1 msec
;; SERVER: 127.0.1.1#53(127.0.1.1)
;; WHEN: Wed Aug 19 09:53:56 PDT 2015
;; MSG SIZE rcvd: 57
chicks@silver 09:53:56 ~ !515 $
confirm broken:
$ dig -x 103.249.240.224
; <<>> DiG 9.9.5-3ubuntu0.3-Ubuntu <<>> -x 103.249.240.224
;; global options: +cmd
;; connection timed out; no servers could be reached
from http://mxtoolbox.com/SuperTool.aspx?action=ptr%3a103.249.240.224&run=toolpage :
PWS3v2 11784ms
0 c.in-addr-servers.arpa 196.216.169.10 NON-AUTH 296 ms Received 6 Referrals , rcode=NO_ERROR 103.in-addr.arpa. 86400 IN NS ns1.apnic.net,103.in-addr.arpa. 86400 IN NS ns2.lacnic.net,103.in-addr.arpa. 86400 IN NS ns3.apnic.net,103.in-addr.arpa. 86400 IN NS ns4.apnic.net,103.in-addr.arpa. 86400 IN NS sec1.authdns.ripe.net,103.in-addr.arpa. 86400 IN NS tinnie.arin.net,
1 ns4.apnic.net 202.12.31.140 NON-AUTH 187 ms Received 4 Referrals , rcode=NO_ERROR 240.249.103.in-addr.arpa. 86400 IN NS ns2.gazonindia.com,240.249.103.in-addr.arpa. 86400 IN NS ns4.gazonindia.com,240.249.103.in-addr.arpa. 86400 IN NS ns3.gazonindia.com,240.249.103.in-addr.arpa. 86400 IN NS ns1.gazonindia.com,
2 ns4.gazonindia.com 103.249.240.10 NON-AUTH 187 ms Timeout after 3 sec, rcode=NO_ERROR
2 ns1.gazonindia.com 103.249.240.8 NON-AUTH 187 ms Timeout after 3 sec, rcode=NO_ERROR
2 ns3.gazonindia.com 103.249.240.9 NON-AUTH 187 ms Timeout after 3 sec, rcode=NO_ERROR
2 ns2.gazonindia.com NON-AUTH 187 ms Timeout resolving IP, rcode=NO_ERROR
This looks like Gazon's servers are not responding. So let's find out who to contact via whois:
$ whois 103.249.240.224
% [whois.apnic.net]
% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html
% Information related to '103.249.240.0 - 103.249.243.255'
inetnum: 103.249.240.0 - 103.249.243.255
netname: GAZON
descr: Gazon Communications India Limited
admin-c: KD220-AP
tech-c: SA683-AP
country: IN
mnt-by: MAINT-IN-IRINN
mnt-irt: IRT-IRINN-IN
status: ASSIGNED portable
changed: [email protected] 20130613
mnt-routes: MAINT-IN-GAZON
source: APNIC
irt: IRT-IRINN-IN
address: Flat no. 6B, Uppals M6 Plaza, 6 Jasola District Centre, New Delhi-110025
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: IH175-AP
tech-c: IH174-AP
auth: # Filtered
mnt-by: MAINT-IN-IRINN
changed: [email protected] 20120907
source: APNIC
role: System Admin
address: Parason House, 28, Venkatesh Nagar, Aurangabad, Maharashtra
country: IN
phone: +91-9762055555
fax-no: +91-2402332944
e-mail: [email protected]
admin-c: KD220-AP
tech-c: KD220-AP
nic-hdl: SA683-AP
remarks: send spam and abuse report to [email protected]
notify: [email protected]
abuse-mailbox: [email protected]
mnt-by: MAINT-IN-PARASON
changed: [email protected] 20140801
source: APNIC
person: Kishor Desarda
address: Parason House, 28, Venkatesh Nagar, Aurangabad, Maharashtra
country: IN
phone: +91-9762055555
fax-no: +91-2402332944
e-mail: [email protected]
nic-hdl: KD220-AP
remarks: send spam and abuse report to [email protected]
notify: [email protected]
abuse-mailbox: [email protected]
mnt-by: MAINT-IN-PARASON
changed: [email protected] 20140801
source: APNIC
% Information related to '103.249.240.0/24AS132770'
route: 103.249.240.0/24
descr: Gazon Communications India Limited
origin: AS132770
country: IN
mnt-lower: MAINT-IN-IRINN
mnt-routes: MAINT-IN-IRINN
mnt-by: MAINT-IN-IRINN
changed: [email protected] 20130708
source: APNIC
% Information related to '103.249.240.0 - 103.249.243.255'
inetnum: 103.249.240.0 - 103.249.243.255
netname: GAZON
descr: Gazon Communications India Limited
admin-c: KD1-IN
tech-c: MN8-IN
country: IN
mnt-by: MAINT-IN-GAZON
mnt-irt: IRT-GAZON-IN
status: ASSIGNED portable
changed: [email protected]
source: APNIC
irt: IRT-GAZON-IN
address: Pune
phone: +91 02065101230
fax-no: +91 2402332944
e-mail: [email protected]
abuse-mailbox: [email protected]
admin-c: KD1-IN
tech-c: MN8-IN
auth: CRYPT-PW yx9RQZOlthZT6
remarks: send spam and abuse report to [email protected]
mnt-by: MAINT-IN-GAZON
changed: [email protected] 20130613
source: IRINN
role: Manager NOC
address: Pune
country: IN
phone: +91 02065101230
fax-no: +91 2402332944
e-mail: [email protected]
admin-c: KD1-IN
tech-c: KD1-IN
nic-hdl: MN8-IN
remarks: send spam and abuse report to [email protected]
notify: [email protected]
abuse-mailbox: [email protected]
mnt-by: MAINT-IN-GAZON
changed: [email protected] 20130613
source: IRINN
person: Kishor Desarda
address: Parason House, 28, Venkatesh Nagar, Jalna Road
country: IN
phone: +91 02065101230
fax-no: +91 2402332944
e-mail: [email protected]
nic-hdl: KD1-IN
remarks: send spam and abuse report to [email protected]
notify: [email protected]
abuse-mailbox: [email protected]
mnt-by: MAINT-IN-GAZON
changed: [email protected] 20130613
source: IRINN
% Information related to '103.249.240.0/24AS132770'
route: 103.249.240.0/24
descr: Gazon Communications India Limited
country: IN
origin: AS132770
remarks: [email protected]
notify: [email protected]
mnt-lower: MAINT-IN-GAZON
mnt-routes: MAINT-IN-GAZON
mnt-by: MAINT-IN-GAZON
changed: [email protected] 20130625
source: IRINN
% This query was served by the APNIC Whois Service version 1.69.1-APNICv1r0 (UNDEFINED)
Yes, you not only can have multiple PTR records in the same reverse zone file, if your IP network is 192.168.10.0/24 and you thus have a reverse zone is 10.168.192.in-addr.arpa you don't really have a reasonable alternative solution.
It's important to note that the only thing that a reverse zone has a direct relation to is the IP network. The pointer records in the zone can refer to names in any number of zones (whatever names are the canonical names for these IP addresses).
There is a common misconception a reverse zone is paired with a "forward" zone.
This is simply not true and I can only guess that this idea comes from how documentation and guides often show one example of each without going into detail about the purpose or what kind of relation there is or, as is rather the case, there isn't between the two examples.
PTR. The OP asked for multiple reverses within a single zone/IP block. We also have the real IP to work with from the comments.
SOAat the top like you need with all BIND zone files.digoutput it is hard to guess what is still wrong.