• Welcome to Hurricane Electric's IPv6 Tunnel Broker Forums.

reverse dns, allocations...

Started by qstraza, March 06, 2008, 09:01:01 AM

Previous topic - Next topic

qstraza

Hello,

I have few questions, basically i need to get few thing get straight...

First of all, whats the difference between /48 and /64, i can see that /48 is shorter...

Second thing, I pointed some domain on my ipv6 like this

q@blabla:~$ host sub.domain.cc
sub.domain.cc has IPv6 address 2001:470:1f0a:1e6::3

I also changed Name Server 1,2,3 to correct ones.

So when i do
$ host 2001:470:1f0a:1e6::3
i get
Host 3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.6.e.1.0.a.0.f.1.0.7.4.0.1.0.0.2.ip6.arpa not found: 3(NXDOMAIN)


im running bind on my own server...
heres the conf of it

;
; 2001:470:1f0a:1e6::/64
;
$TTL 3d ; Default TTL (bind 8 needs this, bind 9 ignores it)
@       IN SOA 6.e.1.0.a.0.f.1.0.7.4.0.1.0.0.2.ip6.arpa. my.email. (
                200802170       ; Serial number (YYYYMMdd)
                24h             ; Refresh time
                30m             ; Retry time
                2d              ; Expire time
                3d              ; Default TTL (bind 8 ignores this, bind 9 needs it)
)

                                ; Name server entries
                                IN     NS     my.hostname
                                IN     NS     ns1.afraid.org.
                                IN     NS     ns2.afraid.org.
; IPv6 PTR entries

; Subnet #1
$ORIGIN 6.e.1.0.a.0.f.1.0.7.4.0.1.0.0.2.ip6.arpa.

3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0         IN      PTR     sub.domain.cc


broquea

Quote from: qstraza
First of all, whats the difference between /48 and /64, i can see that /48 is shorter...
Basically a /48 lets you easily subnet out multiple /64 allocations for your network.
So for example, if you are operating a router with multiple interfaces for different LANs on your network, you can allocate a /64 per LAN out of your larger /48 allocation to each interface.

Quote from: qstraza
Second thing, I pointed some domain on my ipv6 like this

q@blabla:~$ host sub.domain.cc
sub.domain.cc has IPv6 address 2001:470:1f0a:1e6::3

As mentioned in other threads: rDNS for the /64 used for the tunnel's point-to-point connection is not delegated to you, only rDNS for the routed /64 and /48 allocations.
In this case your routed /64 is "1f0b" not "1f0a".

qstraza

thanks for explaining.

So if you dont mind helping me, I have a non-tunnel issue then...

I can ping6 from this site

Ping6 result:

PING 2001:470:1f0b:1e6::3(2001:470:1f0b:1e6::3) 56 data bytes

--- 2001:470:1f0b:1e6::3 ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4035ms
rtt min/avg/max/mdev = 212.944/261.036/288.020/26.540 ms


So I think, that i set this right, so my revDNS doesnt work and i dont know why.

q@lj:~$ host q.smajdek.si
q.smajdek.si has IPv6 address 2001:470:1f0b:1e6::3


q@lj:~$ host 2001:470:1f0b:1e6::3
;; connection timed out; no servers could be reached


and my bind conf:

;
; 2001:470:1f0b:1e6::/64
;
$TTL 3d ; Default TTL (bind 8 needs this, bind 9 ignores it)
@       IN SOA 6.e.1.0.b.0.f.1.0.7.4.0.1.0.0.2.ip6.arpa. mejl (
                200802170       ; Serial number (YYYYMMdd)
                24h             ; Refresh time
                30m             ; Retry time
                2d              ; Expire time
                3d              ; Default TTL (bind 8 ignores this, bind 9 needs it)
)

                                ; Name server entries
                                IN     NS     hostname.
                                IN     NS     ns1.afraid.org.
                                IN     NS     ns2.afraid.org.
; IPv6 PTR entries

; Subnet #1
$ORIGIN 6.e.1.0.b.0.f.1.0.7.4.0.1.0.0.2.ip6.arpa.

3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0         IN      PTR     q.smajdek.si.


Am I missing something?

broquea

#3
Right off the bat, comparing to one of my bind rdns zones, it looks fine.

Looking at the serial, its set for a date a few weeks ago. If you've made any changes in the zone file since then (like 1f0a to 1f0b) have you incremented the serial?

kriteknetworks

q@lj:~$ host 2001:470:1f0b:1e6::3
;; connection timed out; no servers could be reached

Is bind running? is it listening on the correct interface(s)?

qstraza

I changed the serial and in named.conf i had set the wrong path ... well i fixed that now,

if i run bind in non-daemon mode, i get this

11-Mar-2008 20:06:51.515 starting BIND 9.4.1-P1 -fg
11-Mar-2008 20:06:51.516 found 2 CPUs, using 2 worker threads
11-Mar-2008 20:06:51.521 loading configuration from '/etc/bind/named.conf'
11-Mar-2008 20:06:51.522 listening on IPv6 interfaces, port 53
11-Mar-2008 20:06:51.528 listening on IPv4 interface lo, 127.0.0.1#53
11-Mar-2008 20:06:51.529 listening on IPv4 interface eth1, 84.20.254.249#53
11-Mar-2008 20:06:51.531 listening on IPv4 interface eth0, 192.168.2.1#53
11-Mar-2008 20:06:51.532 listening on IPv4 interface vmnet1, 172.16.86.1#53
11-Mar-2008 20:06:51.534 listening on IPv4 interface vmnet8, 192.168.121.1#53
11-Mar-2008 20:06:51.552 automatic empty zone: 254.169.IN-ADDR.ARPA
11-Mar-2008 20:06:51.552 automatic empty zone: 2.0.192.IN-ADDR.ARPA
11-Mar-2008 20:06:51.552 automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
11-Mar-2008 20:06:51.552 automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
11-Mar-2008 20:06:51.552 automatic empty zone: 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
11-Mar-2008 20:06:51.553 automatic empty zone: D.F.IP6.ARPA
11-Mar-2008 20:06:51.553 automatic empty zone: 8.E.F.IP6.ARPA
11-Mar-2008 20:06:51.553 automatic empty zone: 9.E.F.IP6.ARPA
11-Mar-2008 20:06:51.553 automatic empty zone: A.E.F.IP6.ARPA
11-Mar-2008 20:06:51.553 automatic empty zone: B.E.F.IP6.ARPA
11-Mar-2008 20:06:51.556 none:0: open: /etc/bind/rndc.key: permission denied
11-Mar-2008 20:06:51.556 couldn't add command channel 127.0.0.1#953: permission denied
11-Mar-2008 20:06:51.556 none:0: open: /etc/bind/rndc.key: permission denied
11-Mar-2008 20:06:51.556 couldn't add command channel ::1#953: permission denied
11-Mar-2008 20:06:51.556 ignoring config file logging statement due to -g option
11-Mar-2008 20:06:51.559 zone 0.in-addr.arpa/IN: loaded serial 1
11-Mar-2008 20:06:51.560 zone 127.in-addr.arpa/IN: loaded serial 1
11-Mar-2008 20:06:51.560 zone 255.in-addr.arpa/IN: loaded serial 1
11-Mar-2008 20:06:51.561 /etc/bind/he-ipv6:25: ignoring out-of-zone data (3.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.6.e.1.0.b.0.f.1.0.7.4.0.1.0.0.2.ip6.arpa)
11-Mar-2008 20:06:51.561 zone 6.e.1.0.a.0.f.1.0.7.4.0.1.0.0.2.ip6.arpa/IN: loaded serial 200803120
11-Mar-2008 20:06:51.562 zone localhost/IN: loaded serial 1
11-Mar-2008 20:06:51.563 running
11-Mar-2008 20:06:51.563 zone 6.e.1.0.a.0.f.1.0.7.4.0.1.0.0.2.ip6.arpa/IN: sending notifies (serial 200803110)


And this is where it stops, i waited like 10 minutes before quiting...
Shouldnt be this different?


erig


qstraza

hehe, my confs are made via that link:p thanks anyway.