Question

  • Creator
    Topic
  • #2150593

    Reverse DNS lookup

    Locked

    by shhite ·

    We are trying to setup a reverse dns lookup on our server.

    We have a Novell Domain Name Server on a Windows Server 2003 OS with Novel Client 4.91 w Sp3.

    We also have Pix 520 firewall which could be blocking it as well.

    We are not sure whether we setup the reverse lookup correctly or how we would tell if the firewall is blocking it.

    Help!

    Thanks.

    Shanon

All Answers

  • Author
    Replies
    • #2914048

      Clarifications

      by shhite ·

      In reply to Reverse DNS lookup

      Clarifications

    • #2914044

      More information

      by fregeus ·

      In reply to Reverse DNS lookup

      A Novell DNS on a Windows machine. Can anyone else smell trouble already?

      Anyhow, can you give us more information on what you are trying to accomplish and how you are set up.

      Things like, are you trying to set up an internal reverse-lookup zone? an external? an internal that will query the external? etc.

      DNS uses UDP port 53 for queries, no matter if they are name or reverse queries. If your port UDP 53 is open, it should go through your FW.

      I would start by setting up an internal reverse-lookup zone for internal names and try to query it. If it works then move on to the dns forwarding or external lookups.

      Let me know.

      TCB

      • #2914025

        internal vs external zone

        by shhite ·

        In reply to More information

        Since neither of us have a lot of knowledge about reverse lookups period I am going to guess that we want the external reverse look-up.

        I will explain. We are geting messages similar to this:
        Delivery failed after 1 attempts within 0 hours and 0 minutes 553 Dynamic pool. <http://unblock.secureserver.net/?ip=12.47.198.10/ on some of our outgoing e-mails:

        We have never set up anything to do with a rdns.

        Hope that is clearer to u then it is to me.

        • #2926317

          I’ve seen this before

          by fregeus ·

          In reply to internal vs external zone

          Yes, it is looking for a reverse-lookup address for your mail server to make sure you are who you say you are.

          Are you hosting your own external DNS? If yes, then you can host your own external reverse-lookup zones. If not, then who ever is hosting your DNS can host your reverse-lookup zones. There are also a lot of Internet service providers that host the reverse-lookup zones for the IP ranges they use.

          If your external IP addresses are not your own (IE where not purchased by your company but where supplied by your ISP), there is a good chance your supplier is hosting your reverse-lookup zone. If that is the case, you just need to ask them to add the IP of your mail server and all will be fixed.

          Let me know if you need more info.

          TCB

        • #2926279

          Host DNS server

          by shhite ·

          In reply to I’ve seen this before

          We do host our own server but our ISP looks like they are pointing one of our ip address to them instead of to us which might be the issue. We are looking into.

          Thanks

        • #2926270

          DNS

          by jellimonsta ·

          In reply to Host DNS server

          Your original post stated you ran the Novell DNS on a Windows 2003 server?

        • #2926255

          Yes I did

          by shhite ·

          In reply to DNS

          Did I say something different in another post? Maybe I didnt word something correctly. What are you looking at?

        • #2926249

          Well…

          by jellimonsta ·

          In reply to Yes I did

          I had initially assumed you were hosting your external DNS due to mentioning the fact you were running Novell on 2003.
          You should have specified you were running internal DNS only. 😉 🙂

        • #2926245

          Got it

          by shhite ·

          In reply to Yes I did

          Sorry about that jm 🙂 … Makes sense. I will make sure to specify the difference next time. Thanks for your input! I really appreciate it.

        • #2926238

          OK

          by fregeus ·

          In reply to Host DNS server

          Basically, if you are hosting your own reverse-lookup zone, the SOA of that zone should point the NS servers to your servers address. If one or both point to another, then they are hosting the zone or there is an error in the SOA configuration.

          Let me know if you need more help.

          TCB

    • #2913998

      Take a look…

      by jellimonsta ·

      In reply to Reverse DNS lookup

      At this link.
      http://www.novell.com/coolsolutions/appnote/17546.html

      It show’s the steps for reverse lookup zones.

      • #2926340

        Thanks

        by shhite ·

        In reply to Take a look…

        This might work. Will take a look!

    • #3015628

      Spirits Soft Technology

      by spiritssoft ·

      In reply to Reverse DNS lookup

      http://www.spiritssoft.com

      How to Create a Reverse Lookup Zone
      To create a new reverse lookup zone:

      1. Start the DNS snap-in.
      2. Click the DNS Server object for your server in the left pane of the console, and then expand the server object to expand the tree.
      3. Expand Reverse Lookup Zones.
      4. Right-click Reverse Lookup Zones, and then click New Zone. The New Zone Wizard starts. Click Next to continue.
      5. Click Primary zone, and then click Next.
      6. In the Network ID box, type the network ID. For example, type 192.168.0, and then click Next.

      NOTE: The network ID is that portion of the TCP/IP address that pertains to the network. For additional information about TCP/IP networks, click the article number below to view the article in the Microsoft Knowledge Base:
      164015 (http://support.microsoft.com/kb/164015/EN-US/ ) Understanding TCP/IP Addressing and Subnetting Basics
      7. On the Zone File page, click Next
      8. Click Next.
      9. Click Finish.

      The new zone is listed under Reverse Lookup Zones in the DNS tree.

Viewing 3 reply threads