>I am having trouble with my DNS server on a PTR record. My domain is
>freedom2000net.com and I have an A record sat up called
>mail.freedom2000net.com
... which looks like it's an open relay
You only have one NS record
and you allow zone transfers, both forward and reverse zones, that's
security issue.
You only have a /25 subnet ? .128 - .255
You have this A record in your 76.77.216.in-addr.arpa zone file
nasa1.northamericansoftware.com. 1H IN A 216.77.76.130
... which is not necessary, ime.
You don't have a localhost in your freedom2000net.com forward zone
file (I transferred the whole zone file here, you need block zone tranfers).
>and pointing to the IP 216.77.76.245
# dig -x 216.77.76.245
; <<>> DiG 8.3 <<>> -x
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 4
;; QUERY SECTION:
;; 245.76.77.216.in-addr.arpa, type = ANY, class = IN
;; ANSWER SECTION:
245.76.77.216.in-addr.arpa. 12H IN CNAME 245.128.76.77.216.in-addr.arpa.
;; AUTHORITY SECTION:
77.216.in-addr.arpa. 12H IN NS ns.bellsouth.net.
77.216.in-addr.arpa. 12H IN NS ns.atl.bellsouth.net.
77.216.in-addr.arpa. 12H IN NS ns.mia.bellsouth.net.
77.216.in-addr.arpa. 12H IN NS ns.rdu.bellsouth.net.
and:
IP block lookup for 216.77.76.245
whois -h whois.arin.net 216.77.76.245
BellSouth.net Inc. (NETBLK-BELLSNET-BLK5)
301 Perimeter Center North, Suite 400
Atlanta, GA 30346
US
Netname: BELLSNET-BLK5
Netblock: 216.76.0.0 - 216.79.255.255
Maintainer: BELL
Coordinator:
Geurin, Joe (JG726-ARIN) [EMAIL PROTECTED]
678-441-7800 (FAX) 678-441-6968
Domain System inverse mapping provided by:
NS.BELLSOUTH.NET 205.152.0.5
NS.ATL.BELLSOUTH.NET 205.152.0.20
>I am having problems sending mail to some domains and I think it is because
>my reverse DNS isn't sat up corectly.
what's in the Imail logs when sending to these domains?
>I am using microsoft DNS server on an NT box running SP6a. When I
>try and do a DNS query on 216.77.76.245 it
>dosen't give me mail.freedom2000net.com
no, it gives the CNAME from the bellsouth DNS. Your reverse zone is
set up at least at Bellsouth level. I really don't think you sending
pb's are necessarily due to reverse lookups pb's. Let's see your logs.
Len
http://BIND8NT.MEIway.com : Binary for ISC BIND 8.2.3 for NT4 & W2K
http://IMGate.MEIway.com : Build free, hi-perf, anti-spam mail gateways
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
