Project

General

Profile

Actions
Copy link

Bug #8567

open

Smart Proxy BIND incorrect reverse DNS config for networks smaller than /24

Added by John Brooker over 9 years ago. Updated about 7 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Difficulty:
medium
Triaged:
Bugzilla link:
Pull request:
Fixed in Releases:
Found in Releases:
Red Hat JIRA:

Description

The foreman configures the reverse zone for DNS allow with forward zones under certain circumstances.

This is fine if you have a /24 network. but for other networks, such as 10.8.15.64/27 it add's an incorrect zone entry like the one below:

zone "64.15.8.10.in-addr.arpa" {
    type master;
    file "/var/cache/bind/zones/db.64.15.8.10.in-addr.arpa";
    update-policy {
            grant rndc-key zonesub any;
    };
};

bind can only handle zone files in /24, /16 or /8 increments. as a result the above entry is invalid, causing updates to it to fail.

Heres what I had to do to work around it temporarily:

cd /var/cache/bind/zones/
sudo mv db.64.15.8.10.in-addr.arpa db.15.8.10.in-addr.arpa
sudo sed -i 's=64.15.8.10.in-addr.arpa=15.8.10.in-addr.arpa=' /etc/bind/zones.conf db.15.8.10.in-addr.arpa

Bottomline: any reverse DNS zones in bind need to be rounded up to X.X.X.*, X.X.*.* or X.*.*.*

Perhaps this would be fixed if I set the network address in the subnet definition to be 15.8.10, but that is not the right network address for this range.

Actions
Copy link

Also available in: Atom PDF