Re: consolidating in-addr.arpa data

2023-09-19 Thread Petr Špaček
On 18. 09. 23 18:02, John Thurston wrote: Yep. I understand the IP space can be delegated, and some of it allocated for use by systems registering in MS DNS. But this isn't going to happen. There are multiple MS Active Directories, with registered machines scattered willy-nilly across the

Re: consolidating in-addr.arpa data

2023-09-18 Thread John Thurston
Yep. I understand the IP space can be delegated, and some of it allocated for use by systems registering in MS DNS. But this isn't going to happen. There are multiple MS Active Directories, with registered machines scattered willy-nilly across the 10-dot address-space, sometimes several

Re: consolidating in-addr.arpa data

2023-09-16 Thread Greg Choules via bind-users
>From the correct mail alias! On Sat, 16 Sept 2023 at 21:50, Greg Choules wrote: > Hi Ged. > 172.16/12 is not a special case. The whole problem (IMHO) stems from how > humans have chosen to represent both IP addresses (v4; v6 are different and > actually a little easier) AND DNS domain names;

Re: consolidating in-addr.arpa data

2023-09-16 Thread Paul Kosinski via bind-users
On Sat, 16 Sep 2023 10:22:26 +0100 (BST) "G.W. Haywood via bind-users" wrote: > Hi there, > ... >I'd be surprised if the OP couldn't manage with 2^20 IPs in a segment - > but then I guess he does work in the .gov domain. ^^^ The OP's contact

Re: consolidating in-addr.arpa data

2023-09-16 Thread G.W. Haywood via bind-users
Hi there, On Sat, 16 Sep 2023, Greg Choules wrote: On Sat, 16 Sep 2023, G.W. Haywood wrote: ... > Is there a reason not to split the /8 into two /9s or something like that? ... Although it is technically possible to do reverses on non-octet boundaries (for example, see

Re: consolidating in-addr.arpa data

2023-09-16 Thread Greg Choules via bind-users
Hi. Although it is technically possible to do reverses on non-octet boundaries (for example, see https://www.ietf.org/rfc/rfc2317.txt) it is a complete pita, in my experience. Personally I would not head down that path. Stick to /8, /16 or /24. Cheers, Greg On Sat, 16 Sept 2023 at 09:20, G.W.

Re: consolidating in-addr.arpa data

2023-09-16 Thread G.W. Haywood via bind-users
Hi there, On Sat, 16 Sep 2023, John Thurston wrote: A host which auto-registers in MS DNS, creates an A in foo.alaska.gov and PTR in whatever.10.in-addr.arpa. MS DNS is happy to publish those. But the DNS system running on BIND also has a whatever.10.in-addr.arpa zone. So if I want to

Re: consolidating in-addr.arpa data

2023-09-16 Thread Greg Choules via bind-users
Hi John. Sorry if this sounds picky, but a dot out of place in this game is the difference between success and crash-n-burn. Please can you show me EXACTLY what ...10.in-addra.arpa zones you have in both sets of DNS? >From previous work with AD clients I think that, if it doesn't already exist,

Re: consolidating in-addr.arpa data

2023-09-15 Thread Fred Morris
You can't resolve differences in both directions automatically without inevitable conflicts, similar to merging code changes. That said, RPZ for fun and profit... On Fri, 15 Sep 2023, John Thurston wrote: A host which auto-registers in MS DNS, creates an A in foo.alaska.gov and PTR in

Re: consolidating in-addr.arpa data

2023-09-15 Thread Mark Andrews
Create a 10.in-addr.arpa zone with appropriate delegations and have all servers serve it. That way they can all find te sub zones. -- Mark Andrews > On 16 Sep 2023, at 10:16, John Thurston wrote: > >  > A host which auto-registers in MS DNS, creates an A in foo.alaska.gov and PTR > in

Re: consolidating in-addr.arpa data

2023-09-15 Thread John Thurston
A host which auto-registers in MS DNS, creates an A in foo.alaska.gov and PTR in whatever.10.in-addr.arpa. MS DNS is happy to publish those. But the DNS system running on BIND also has a whatever.10.in-addr.arpa zone. So if I want to find the PTR for 13.12.11.10.in-addr.arpa, I must query

Re: consolidating in-addr.arpa data

2023-09-15 Thread Greg Choules via bind-users
Hi John. Can you tell me a bit more please? - What zones exist in both BIND and MS DNS for something.10.in-addr.arpa? - Where are hosts auto registering to? I'd guess MS, but it would be good to confirm. - What does fragmentation look like? A few real examples would be useful. I'm trying to

consolidating in-addr.arpa data

2023-09-15 Thread John Thurston
This question involves making our BIND system work with Microsoft's DNS software. If this makes it off-topic, let me know and I'll be quiet about it. We use ISC BIND to hold and host most of our zone data. Internally, we have delegated some zones, and they are held in Microsoft DNS. These