Not an urgent one, just something to be solved.

My old Microserver died. I had been slowly preparing two Raspberry Pis
to take over, but my hand was forced. I got the main server running
postfix working reasonably well. To save time, I used the ISP's router
for DNS and DHCP, intending to replace them later. After a crash course
in postfix and nftables it all seem to be working.

Then I switched DNS to BIND9 running on the other Pi. All OK, then an
email from this list came in and was bounced for having no PTR. I very
quickly restored DNS to the router and investigated. It turns out that
the router DNS server, whatever it is, can see bendel, but BIND9
cannot. I've run bind for decades, the last thirteen years on the
Microserver, and never had a problem with bendel. The current BIND9 is
running without forwarders, as previous versions have. Here's what dig
shows:

ISP DNS:

joe@jrenewsid:~$ dig -x   82.195.75.100

; <<>> DiG 9.20.24-1+b1-Debian <<>> -x 82.195.75.100
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19280
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; QUESTION SECTION:
;100.75.195.82.in-addr.arpa.    IN      PTR

;; ANSWER SECTION:
100.75.195.82.in-addr.arpa. 851 IN      CNAME
100.64-26.75.195.82.in-addr.arpa. 
100.64-26.75.195.82.in-addr.arpa. 851 IN PTR    bendel.debian.org.

;; Query time: 8 msec
;; SERVER: 192.168.71.1#53(192.168.71.1) (UDP)
;; WHEN: Tue Jul 14 21:21:04 BST 2026
;; MSG SIZE  rcvd: 110

BIND9:

joe@jrenewsid:~$ dig @192.168.71.8  -x   82.195.75.100

; <<>> DiG 9.20.24-1+b1-Debian <<>> @192.168.71.8 -x 82.195.75.100
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 31340
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
; COOKIE: 52c91b299124cdfd010000006a569a4c89ea67199c61c1fe (good)
;; QUESTION SECTION:
;100.75.195.82.in-addr.arpa.    IN      PTR

;; Query time: 96 msec
;; SERVER: 192.168.71.8#53(192.168.71.8) (UDP)
;; WHEN: Tue Jul 14 21:21:32 BST 2026
;; MSG SIZE  rcvd: 83

Also ISP DNS:

joe@jrenewsid:~$ host 82.195.75.100
100.75.195.82.in-addr.arpa is an alias for100.64-26.75.195.82.in-addr.arpa.
100.64-26.75.195.82.in-addr.arpa domain name pointer bendel.debian.org.

Also BIND9:

joe@piserve1:~ $ host 82.195.75.100
Host 100.75.195.82.in-addr.arpa not found: 2(SERVFAIL)


OK, there's a CNAME involved, but should this really stop BIND9 dead?
Any ideas how to fix this? BIND9 seems to work for everything else I
tried, and it used to work for bendel on the Microserver, which no
longer runs.

-- 
Joe

Reply via email to