Question : Inconsistent Reverse DNS between Primary and Secondary name servers

We host name service for several clients. One client in particular hosts their own mail on their own network (the ISP is ATT) and requires reverse DNS from us. (ATT won't provide it directly, but instead delegates it to us.) Their mail server's IP address is 12.196.110.69.

According to DNSStuff.com, our primary name server (ns1.revalence.net), reports the reverse DNS properly, but our secondary name server (ns2.revalence.net) does not. Both are Windows 2003 servers, they are on separate networks, and the forward and reverse zone files for these servers are identical.

Here are the results from DNSStuff.com for each name server:

Asking ns1.revalence.net for 69.110.196.12.in-addr.arpa PTR record:  
       ns1.revalence.net says to go to cmtu.mt.ns.els-gms.att.net. (zone: 12.in-addr.arpa.)
Asking cmtu.mt.ns.els-gms.att.net. for 69.110.196.12.in-addr.arpa PTR record:  Got CNAME referral to 69.64/26.110.196.12.in-addr.arpa. at server ns1.revalence.net. (zone 64/26.110.196.12.in-addr.arpa.) [from 12.127.16.69]
Asking h.root-servers.net for 69.64/26.110.196.12.in-addr.arpa. PTR record:  
       h.root-servers.net [128.63.2.53] says to go to cbru.br.ns.els-gms.att.net. (zone: 12.in-addr.arpa.)
Asking cbru.br.ns.els-gms.att.net. for 69.64/26.110.196.12.in-addr.arpa. PTR record:  
       cbru.br.ns.els-gms.att.net [199.191.128.105] says to go to ns1.revalence.net. (zone: 64/26.110.196.12.in-addr.arpa.)
Asking ns1.revalence.net. for 69.64/26.110.196.12.in-addr.arpa. PTR record:  Reports mail.kidstlc.org. [from 64.151.21.227]
Answer:
12.196.110.69 PTR record:
mail.kidstlc.org.
 [TTL 3600s] [A=12.196.110.69]

Asking ns2.revalence.net for 69.110.196.12.in-addr.arpa PTR record:  
       ns2.revalence.net says to go to cbru.br.ns.els-gms.att.net. (zone: 12.in-addr.arpa.)
Asking cbru.br.ns.els-gms.att.net. for 69.110.196.12.in-addr.arpa PTR record:  Got CNAME referral to 69.64/26.110.196.12.in-addr.arpa. at server ns1.revalence.net. (zone 64/26.110.196.12.in-addr.arpa.) [from 199.191.128.105]
Asking h.root-servers.net for 69.64/26.110.196.12.in-addr.arpa. PTR record:  
       h.root-servers.net [128.63.2.53] says to go to cmtu.mt.ns.els-gms.att.net. (zone: 12.in-addr.arpa.)
Asking cmtu.mt.ns.els-gms.att.net. for 69.64/26.110.196.12.in-addr.arpa. PTR record:  
       cmtu.mt.ns.els-gms.att.net [12.127.16.69] says to go to ns2.revalence.net. (zone: 64/26.110.196.12.in-addr.arpa.)
Asking ns2.revalence.net. for 69.64/26.110.196.12.in-addr.arpa. PTR record:  Reports that no PTR records exist [from 66.39.193.165].
Answer:
No PTR records exist for 12.196.110.69.
 [Neg TTL=3600 seconds]

Below is their forward zone:
;
;  Database file kidstlc.org.dns for kidstlc.org zone.
;      Zone version:  2009100906
;

@                       IN  SOA ns1.revalence.net.  admin.revalence.net. (
                              2009100906   ; serial number
                              1200         ; refresh
                              600          ; retry
                              1209600      ; expire
                              3600       ) ; default TTL

;
;  Zone NS records
;

@                       NS      ns2.revalence.net.
ns2.revalence.net.      A      66.39.193.165
@                       NS      ns1.revalence.net.
ns1.revalence.net.      A      64.151.21.227

;
;  Zone records
;

@                       A      12.196.110.90
@                       MX      10      mail.kidstlc.org.
@                       TXT      ( "v=spf1 ip4:12.196.110.69 mx ptr ~all" )
mail                    A      12.196.110.69
www                     CNAME      kidstlc.org.

Following is their reverse zone:
;
;  Database file 69.64_26.110.196.12.in-addr.arpa.dns for 69.64/26.110.196.12.in-addr.arpa zone.
;      Zone version:  2009010616
;

@                       IN  SOA ns1.revalence.net.  admin.21ccc.com. (
                              2009010616   ; serial number
                              1200         ; refresh
                              600          ; retry
                              1209600      ; expire
                              3600       ) ; default TTL

;
;  Zone NS records
;

@                       NS      ns2.revalence.net.
ns2.revalence.net.      A      66.39.193.165
@                       NS      ns1.revalence.net.
ns1.revalence.net.      A      64.151.21.227

;
;  Zone records
;

@                       PTR      mail.kidstlc.org.

If you got this far, thanks in advance for your help.

Brian

Answer : Inconsistent Reverse DNS between Primary and Secondary name servers


Ahh yes, much better :) I get the proper response now both directly and via dig ... +trace.

I can't speak for dnsstuff, I haven't had access to that one since they started charging. That said, last time I did use it they queried authoritative servers, so I'm surprised you're still getting a fail there, everything appears to be completely correct.

Chris
Random Solutions  
 
programming4us programming4us