IPv6 design, deployment, standards, and best practices.
User avatar
ristau5741
Post Whore
Posts:
9969
Joined:
Tue Aug 21, 2007 2:15 pm
Certs:
Instanity

dns - reverse lookups

Tue Jun 19, 2012 11:16 am

implementers,

how are you guys dealing with IPv6 reverse lookups
particularly in government or commercial spaces.
Tips of the day:
- The human mind is the ultimate creation invention.
- "Emergency Belkin. $40........................Boom."
- "I see" said the blind man pissing into the wind, "it's all coming back to me".
- Sausage time

User avatar
ristau5741
Post Whore
Posts:
9969
Joined:
Tue Aug 21, 2007 2:15 pm
Certs:
Instanity

Re: dns - reverse lookups

Thu Jun 21, 2012 11:52 am

well I did find 1 thing harder than IPv6...
IPv6 in reverse. :)
Tips of the day:
- The human mind is the ultimate creation invention.
- "Emergency Belkin. $40........................Boom."
- "I see" said the blind man pissing into the wind, "it's all coming back to me".
- Sausage time

User avatar
mellowd
CCIE #38070
Posts:
13814
Joined:
Wed Jun 18, 2008 7:49 am
Certs:
CCIE (RS,SP), JNCIE-SP, BC-/SPNE/NP

Re: dns - reverse lookups

Thu Jun 21, 2012 12:09 pm

At the moment we use bind to do the reverse lookups. Servers aren't my forte so I can't say exactly how it's all going, but it's similar to a reverse IPv4 record.

So you'll have something like 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.2.a.e.1.0.0.2.ip6.arpa with your records inside.

Your DNS server needs to be speaking IPv6 and have a route to the internet so other IPv6 servers can query you of course.



This is just temporary and we are looking at getting a 3rd party tool...

User avatar
routerdork
Post Whore
Posts:
1497
Joined:
Tue Feb 22, 2011 9:40 am
Certs:
CCNA, MCDST, MCP, A+

Re: dns - reverse lookups

Thu Jun 21, 2012 3:37 pm

Infoblox appliances for us. We have two of them running dual-stack.

User avatar
ristau5741
Post Whore
Posts:
9969
Joined:
Tue Aug 21, 2007 2:15 pm
Certs:
Instanity

Re: dns - reverse lookups

Fri Jun 22, 2012 10:09 am

BlueLuke wrote:
mellowd wrote:So you'll have something like 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.2.a.e.1.0.0.2.ip6.arpa with your records inside.


Gah, that's crazy to type in,



That's just the file name :)

The records in the file will look something like
Code: Select all
$ORIGIN 0.0.0.0.b.0.0.0.1.2.a.e.1.0.0.2.ip6.arpa.

1.0.0.0.1.0.0.0.0.0.0.0.0.0.0.0         IN      PTR     example1.org.
1.0.0.0.2.0.0.0.0.0.0.0.0.0.0.0         IN      PTR     subdomain.example1.org.
1.0.0.0.3.0.0.0.0.0.0.0.0.0.0.0         IN      PTR     example2.org.
Tips of the day:
- The human mind is the ultimate creation invention.
- "Emergency Belkin. $40........................Boom."
- "I see" said the blind man pissing into the wind, "it's all coming back to me".
- Sausage time

User avatar
routerdork
Post Whore
Posts:
1497
Joined:
Tue Feb 22, 2011 9:40 am
Certs:
CCNA, MCDST, MCP, A+

Re: dns - reverse lookups

Fri Jun 22, 2012 11:50 am

This is a sample direct from DNS and BIND on IPv6 pg.6...
Code: Select all
As with IPv4 reverse-mapping zones, IPv6 reverse-mapping zones mostly contain PTR
records. And as with any zone, they must contain one SOA record and one or more NS
records. Here’s what the beginning of that zone looks like:

$TTL 1d
@ IN SOA terminator.movie.edu. hostmaster.movie.edu. (
2011030800 ; Serial number
1h ; Refresh (1 hour)
15m ; Retry (15 minutes)
30d ; Expire (30 days)
10m ) ; Negative-caching TTL (10 minutes)

IN NS terminator.movie.edu.
IN NS wormhole.movie.edu.

3.d.0.0.0.0.0.0.0.0.0.0.0.0.0.0 PTR suckerpunch.v6.movie.edu.
4.d.0.0.0.0.0.0.0.0.0.0.0.0.0.0 PTR super8.v6.movie.edu.

'

Return to IPv6

Who is online

Users browsing this forum: No registered users and 6 guests