guys. I have a problem I've run into with our DNS setup at my company. (I'm running BIND9 on a Linux platform, but this is not BIND-specific.)
I need to delegate a /24 reverse zone to another set of DNS servers outside of my control, using a set of statements like this:
z.y.x.in-addr.arpa IN NS nsa.domain.com z.y.x.in-addr.arpa IN NS nsb.domain.com
However, my company has been delegated a /17 from ARIN, so we don't have a
y.x.in-addr.arpa zone loaded into our DNS, meaning that I don't have a place to put in the redelegation statements.
I'm looking for some ideas from anyone who has ever run into this problem. The main dilemma is that if I create the y.z.in-addr.arpa zone, that zone will cover the whole /16. I'll be breaking reverse lookups for the /17 block we don't control for anyone using our DNS servers. However, if I don't create the zone, I can't redelegate the /24.
(As a note, as I was writing this, I had a concept - perhaps I could create the y.x.in-addr.arpa zone, and simply generate NS records for the octets I don't control. These NS records could refer up the chain to ARIN's nameservers. (This might result in a bad referral message, though, but it might work.) Any thoughts on this idea would be greatly appreciated.)
Thank you in advance!