soucis de resolution reverse (renater)
Gilles BRUNO <[email protected]> Mon, 9 Apr 2018 11:40:21 +0200
| Newsgroups | gmane.network.dns.french |
|---|---|
| Message-ID | <[email protected]> |
Bonjour à tous, nous avons des soucis de résolution des reverses de certaines classes C de renater (utilisé pour l'antispam) En particulier, nous cherchons à resoudre les reverses des IP : mxa.relay.renater.fr has address *194.214.201.8* mxb.relay.renater.fr has address *194.214.201.9* mxc.relay.renater.fr has address *194.214.200.8* mxd.relay.renater.fr has address *194.214.200.9* en faisant un dig +trace il semble qu'il y ait des incohérences sur les SOA, en outre il semble qu'un des serveurs - ns4.cnrs.fr - ne (nous?) réponde pas : > 11:28:58 ns1:~ dig NS *200.214.194.in-addr.arpa*@ns1.renater.fr. > > ; <<>> DiG 9.9.12 <<>> NS 200.214.194.in-addr.arpa @ns1.renater.fr. > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37830 > ;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 5 > ;; WARNING: recursion requested but not available > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ;; QUESTION SECTION: > ;200.214.194.in-addr.arpa. IN NS > > ;; ANSWER SECTION: > *200.214.194.in-addr.arpa. 86400 IN NS ns2.renater.fr.** > **200.214.194.in-addr.arpa. 86400 IN NS ns4.cnrs.fr.** > **200.214.194.in-addr.arpa. 86400 IN NS ns1.cnrs.fr.** > **200.214.194.in-addr.arpa. 86400 IN NS ns1.renater.fr.** > *** > ;; ADDITIONAL SECTION: > ns1.renater.fr. 300 IN A 193.49.159.2 > ns2.renater.fr. 300 IN A 193.49.159.9 > ns1.renater.fr. 300 IN AAAA 2001:660:3001:4002::2 > ns2.renater.fr. 300 IN AAAA 2001:660:3001:4002::9 > > ;; Query time: 12 msec > ;; SERVER: 193.49.159.2#53(193.49.159.2) > ;; WHEN: Mon Apr 09 10:53:07 CEST 2018 > ;; MSG SIZE rcvd: 228 > 11:31:03 ns1:~ dig NS 200.214.194.in-addr.arpa @ns4.cnrs.fr. > > ; <<>> DiG 9.9.12 <<>> NS 200.214.194.in-addr.arpa @ns4.cnrs.fr. > ;; global options: +cmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 26810 > ;; flags: qr rd; QUERY: 1,*ANSWER: 0,* AUTHORITY: 0, ADDITIONAL: 1 > ;; WARNING: recursion requested but not available > > ;; OPT PSEUDOSECTION: > ; EDNS: version: 0, flags:; udp: 4096 > ;; QUESTION SECTION: > ;200.214.194.in-addr.arpa. IN NS > > ;; Query time: 4 msec > ;; SERVER: 195.220.197.11#53(195.220.197.11) > ;; WHEN: Mon Apr 09 11:31:04 CEST 2018 > ;; MSG SIZE rcvd: 53 En outre j'ai des comportements "bizzares" en faisant un dig +trace (réponses incohérentes ?) : > 11:29:20 ns1:/etc/namedb *dig +trace NS 200.214.194.in-addr.arpa* > > ; <<>> DiG 9.9.12 <<>> +trace NS 200.214.194.in-addr.arpa > ;; global options: +cmd > . 84 IN NS l.root-servers.net. > . 84 IN NS f.root-servers.net. > . 84 IN NS c.root-servers.net. > . 84 IN NS e.root-servers.net. > . 84 IN NS j.root-servers.net. > . 84 IN NS d.root-servers.net. > . 84 IN NS m.root-servers.net. > . 84 IN NS k.root-servers.net. > . 84 IN NS g.root-servers.net. > . 84 IN NS a.root-servers.net. > . 84 IN NS h.root-servers.net. > . 84 IN NS i.root-servers.net. > . 84 IN NS b.root-servers.net. > . 189 IN RRSIG NS 8 0 518400 > 20180422050000 20180409040000 39570 . > Qt4fEjoHV0VZcIyLDmsvkUkIxdsLT3nO4GtYe1oJx1tfZBfc1/+MhapF > MQezvttHNs2KFLLlihzk7pceOF8mHKHsStFKiEzbFATYiTZ5ecBzml55 > Q98Wz9hZkpOQFB/2jqlAzDv04rvV6HuDk1E1/c2ZOaCtLvZzXEAk6/CZ > mlgFeBuEst57kYK+rdUZCRCrDndZbIxvqOJ+7kqX/KlensWa1voqDKyv > XGJ0/DW7tZzGkFP0Wj7BWLnL8vB9n6uKsEKrYR6vslgJC4mAyBWqW8By > D1seNKqqgslm70Yv5fFsODp21OS7HPhgrvQnNA7RoRdcczlx63CFe6Wl YWvVRQ== > ;; Received 525 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms > > in-addr.arpa. 172800 IN NS f.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS c.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS b.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS e.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS d.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS a.in-addr-servers.arpa. > in-addr.arpa. 86400 IN DS 63982 8 2 > AAF4FB5D213EF25AE44679032EBE3514C487D7ABD99D7F5FEC3383D0 30733C73 > in-addr.arpa. 86400 IN DS 47054 8 2 > 5CAFCCEC201D1933B4C9F6A9C8F51E51F3B39979058AC21B8DF1B1F2 81CBC6F2 > in-addr.arpa. 86400 IN DS 53696 8 2 > 13E5501C56B20394DA921B51412D48B7089C5EB6957A7C58553C4D4D 424F04DF > in-addr.arpa. 86400 IN RRSIG DS 8 2 86400 > 20180422000000 20180408230000 56191 arpa. > wrWchbnEBx5Q/GpddahFVydC+Y5YO/gVr+70QwpXOTrt7ztPWZ47ZkJG > wWdlCKgQfuGsEqqAQ9RRK0bHuDZelQVdyWMnggyoVCC9i9GlQwAy/Vzq > pLy0233A03Fss3l2Cpr9tBKIV+TLGnlzUTm10Bi+yI+tdZrb6p024hEn R7U= > ;; Received 737 bytes from 192.33.4.12#53(c.root-servers.net) in 18 ms > > 194.in-addr.arpa. 86400 IN NS ns3.lacnic.net. > 194.in-addr.arpa. 86400 IN NS ns4.apnic.net. > 194.in-addr.arpa. 86400 IN NS tinnie.arin.net. > 194.in-addr.arpa. 86400 IN NS ns3.afrinic.net. > 194.in-addr.arpa. 86400 IN NS pri.authdns.ripe.net. > 194.in-addr.arpa. 86400 IN NS sns-pb.isc.org. > 194.in-addr.arpa. 86400 IN DS 50849 8 2 > 7B0F17B502B365DC66849267872E29DF457EB8261A5A73F0D75FF1E7 1466F278 > 194.in-addr.arpa. 86400 IN RRSIG DS 8 3 86400 > 20180429020750 20180407202433 43878 in-addr.arpa. > IxXCGBya9Toa2uoYFCFuWDUMrvwTTmzLFFFfTjVd9rltJKspoAtL561N > RYbPp37V4WZK4MCVAu7Q+E4oj5z9Sc1fcmu5jgv40MEJ0ZGKYj174mzq > fTc7jmB5DnNOsAIWBJ3lIOfSNo5glCHGbOVONaXlWpYp8McJKL74W24i gKA= > ;; Received 436 bytes from 199.180.182.53#53(a.in-addr-servers.arpa) > in 167 ms > > 214.194.in-addr.arpa. 172800 IN NS ns2.nic.fr. > 214.194.in-addr.arpa. 172800 IN NS ns.ripe.net. > 214.194.in-addr.arpa. 172800 IN NS ns2.renater.fr. > 214.194.in-addr.arpa. 172800 IN NS ns1.renater.fr. > 214.194.in-addr.arpa. 3600 IN NSEC 215.194.in-addr.arpa. NS > RRSIG NSEC > 214.194.in-addr.arpa. 3600 IN RRSIG NSEC 8 4 3600 > 20180508171131 20180408161131 16836 194.in-addr.arpa. > aT8455YQybGrfQd6h52prDLnFZ01xFmSFAHoq2Y8fWF29MBCp+OJ4WHx > GPoV6tNn2ISOaV18uWz62lcUZj8/v0hD0Dw/PSCrxIHg1ftREWV7IE8p > 6smXcLms3VOK+GlXY0zFDb36e+bFc5gFapEE2MAgKT7Kd6TQkTrZlldx GNo= > ;; Received 744 bytes from 192.5.4.1#53(sns-pb.isc.org) in 20 ms > > *200.214.194.in-addr.arpa. 86400 IN NS ns1.cnrs.fr.** > **200.214.194.in-addr.arpa. 86400 IN NS ns4.cnrs.fr.** > **200.214.194.in-addr.arpa. 86400 IN NS ns1.renater.fr.** > **200.214.194.in-addr.arpa. 86400 IN NS ns2.renater.fr.** > **;; Received 1588 bytes from 193.49.159.2#53(ns1.renater.fr) in 15 ms* mais : > 11:34:12 ns1:/etc/namedb dig +trace NS 200.214.194.in-addr.arpa > > ; <<>> DiG 9.9.12 <<>> +trace NS 200.214.194.in-addr.arpa > ;; global options: +cmd > . 110 IN NS c.root-servers.net. > . 110 IN NS d.root-servers.net. > . 110 IN NS f.root-servers.net. > . 110 IN NS m.root-servers.net. > . 110 IN NS i.root-servers.net. > . 110 IN NS j.root-servers.net. > . 110 IN NS a.root-servers.net. > . 110 IN NS b.root-servers.net. > . 110 IN NS l.root-servers.net. > . 110 IN NS g.root-servers.net. > . 110 IN NS e.root-servers.net. > . 110 IN NS k.root-servers.net. > . 110 IN NS h.root-servers.net. > . 267 IN RRSIG NS 8 0 518400 > 20180422050000 20180409040000 39570 . > Qt4fEjoHV0VZcIyLDmsvkUkIxdsLT3nO4GtYe1oJx1tfZBfc1/+MhapF > MQezvttHNs2KFLLlihzk7pceOF8mHKHsStFKiEzbFATYiTZ5ecBzml55 > Q98Wz9hZkpOQFB/2jqlAzDv04rvV6HuDk1E1/c2ZOaCtLvZzXEAk6/CZ > mlgFeBuEst57kYK+rdUZCRCrDndZbIxvqOJ+7kqX/KlensWa1voqDKyv > XGJ0/DW7tZzGkFP0Wj7BWLnL8vB9n6uKsEKrYR6vslgJC4mAyBWqW8By > D1seNKqqgslm70Yv5fFsODp21OS7HPhgrvQnNA7RoRdcczlx63CFe6Wl YWvVRQ== > ;; Received 525 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms > > in-addr.arpa. 172800 IN NS a.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS b.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS c.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS d.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS e.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS f.in-addr-servers.arpa. > in-addr.arpa. 86400 IN DS 47054 8 2 > 5CAFCCEC201D1933B4C9F6A9C8F51E51F3B39979058AC21B8DF1B1F2 81CBC6F2 > in-addr.arpa. 86400 IN DS 53696 8 2 > 13E5501C56B20394DA921B51412D48B7089C5EB6957A7C58553C4D4D 424F04DF > in-addr.arpa. 86400 IN DS 63982 8 2 > AAF4FB5D213EF25AE44679032EBE3514C487D7ABD99D7F5FEC3383D0 30733C73 > in-addr.arpa. 86400 IN RRSIG DS 8 2 86400 > 20180422000000 20180408230000 56191 arpa. > wrWchbnEBx5Q/GpddahFVydC+Y5YO/gVr+70QwpXOTrt7ztPWZ47ZkJG > wWdlCKgQfuGsEqqAQ9RRK0bHuDZelQVdyWMnggyoVCC9i9GlQwAy/Vzq > pLy0233A03Fss3l2Cpr9tBKIV+TLGnlzUTm10Bi+yI+tdZrb6p024hEn R7U= > ;; Received 737 bytes from 192.5.5.241#53(f.root-servers.net) in 10 ms > > 194.in-addr.arpa. 86400 IN NS ns3.lacnic.net. > 194.in-addr.arpa. 86400 IN NS ns3.afrinic.net. > 194.in-addr.arpa. 86400 IN NS ns4.apnic.net. > 194.in-addr.arpa. 86400 IN NS pri.authdns.ripe.net. > 194.in-addr.arpa. 86400 IN NS sns-pb.isc.org. > 194.in-addr.arpa. 86400 IN NS tinnie.arin.net. > 194.in-addr.arpa. 86400 IN DS 50849 8 2 > 7B0F17B502B365DC66849267872E29DF457EB8261A5A73F0D75FF1E7 1466F278 > 194.in-addr.arpa. 86400 IN RRSIG DS 8 3 86400 > 20180429020750 20180407202433 43878 in-addr.arpa. > IxXCGBya9Toa2uoYFCFuWDUMrvwTTmzLFFFfTjVd9rltJKspoAtL561N > RYbPp37V4WZK4MCVAu7Q+E4oj5z9Sc1fcmu5jgv40MEJ0ZGKYj174mzq > fTc7jmB5DnNOsAIWBJ3lIOfSNo5glCHGbOVONaXlWpYp8McJKL74W24i gKA= > ;; Received 436 bytes from 196.216.169.10#53(c.in-addr-servers.arpa) > in 216 ms > > 214.194.in-addr.arpa. 172800 IN NS ns2.nic.fr. > 214.194.in-addr.arpa. 172800 IN NS ns1.renater.fr. > 214.194.in-addr.arpa. 172800 IN NS ns2.renater.fr. > 214.194.in-addr.arpa. 172800 IN NS ns.ripe.net. > 214.194.in-addr.arpa. 3600 IN NSEC 215.194.in-addr.arpa. NS > RRSIG NSEC > 214.194.in-addr.arpa. 3600 IN RRSIG NSEC 8 4 3600 > 20180508171131 20180408161131 16836 194.in-addr.arpa. > aT8455YQybGrfQd6h52prDLnFZ01xFmSFAHoq2Y8fWF29MBCp+OJ4WHx > GPoV6tNn2ISOaV18uWz62lcUZj8/v0hD0Dw/PSCrxIHg1ftREWV7IE8p > 6smXcLms3VOK+GlXY0zFDb36e+bFc5gFapEE2MAgKT7Kd6TQkTrZlldx GNo= > ;; Received 364 bytes from 204.61.216.100#53(ns3.afrinic.net) in 4 ms > > *214.194.in-addr.arpa. 86400 IN SOA ns1.renater.fr. > hostmaster.renater.fr. 2015012387 28800 7200 604800 172800 > ;; Received 114 bytes from 193.0.9.6#53(ns.ripe.net) in 21 ms* > > > 11:36:30 root@ns1:/etc/namedb dig +trace NS 200.214.194.in-addr.arpa > > ; <<>> DiG 9.9.12 <<>> +trace NS 200.214.194.in-addr.arpa > ;; global options: +cmd > . 287 IN NS b.root-servers.net. > . 287 IN NS e.root-servers.net. > . 287 IN NS h.root-servers.net. > . 287 IN NS i.root-servers.net. > . 287 IN NS c.root-servers.net. > . 287 IN NS k.root-servers.net. > . 287 IN NS d.root-servers.net. > . 287 IN NS j.root-servers.net. > . 287 IN NS g.root-servers.net. > . 287 IN NS f.root-servers.net. > . 287 IN NS l.root-servers.net. > . 287 IN NS m.root-servers.net. > . 287 IN NS a.root-servers.net. > . 287 IN RRSIG NS 8 0 518400 > 20180422050000 20180409040000 39570 . > Qt4fEjoHV0VZcIyLDmsvkUkIxdsLT3nO4GtYe1oJx1tfZBfc1/+MhapF > MQezvttHNs2KFLLlihzk7pceOF8mHKHsStFKiEzbFATYiTZ5ecBzml55 > Q98Wz9hZkpOQFB/2jqlAzDv04rvV6HuDk1E1/c2ZOaCtLvZzXEAk6/CZ > mlgFeBuEst57kYK+rdUZCRCrDndZbIxvqOJ+7kqX/KlensWa1voqDKyv > XGJ0/DW7tZzGkFP0Wj7BWLnL8vB9n6uKsEKrYR6vslgJC4mAyBWqW8By > D1seNKqqgslm70Yv5fFsODp21OS7HPhgrvQnNA7RoRdcczlx63CFe6Wl YWvVRQ== > ;; Received 525 bytes from 127.0.0.1#53(127.0.0.1) in 0 ms > > in-addr.arpa. 172800 IN NS a.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS b.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS c.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS d.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS e.in-addr-servers.arpa. > in-addr.arpa. 172800 IN NS f.in-addr-servers.arpa. > in-addr.arpa. 86400 IN DS 47054 8 2 > 5CAFCCEC201D1933B4C9F6A9C8F51E51F3B39979058AC21B8DF1B1F2 81CBC6F2 > in-addr.arpa. 86400 IN DS 53696 8 2 > 13E5501C56B20394DA921B51412D48B7089C5EB6957A7C58553C4D4D 424F04DF > in-addr.arpa. 86400 IN DS 63982 8 2 > AAF4FB5D213EF25AE44679032EBE3514C487D7ABD99D7F5FEC3383D0 30733C73 > in-addr.arpa. 86400 IN RRSIG DS 8 2 86400 > 20180422000000 20180408230000 56191 arpa. > wrWchbnEBx5Q/GpddahFVydC+Y5YO/gVr+70QwpXOTrt7ztPWZ47ZkJG > wWdlCKgQfuGsEqqAQ9RRK0bHuDZelQVdyWMnggyoVCC9i9GlQwAy/Vzq > pLy0233A03Fss3l2Cpr9tBKIV+TLGnlzUTm10Bi+yI+tdZrb6p024hEn R7U= > ;; Received 737 bytes from 198.97.190.53#53(h.root-servers.net) in 99 ms > > 194.in-addr.arpa. 86400 IN NS ns3.lacnic.net. > 194.in-addr.arpa. 86400 IN NS ns3.afrinic.net. > 194.in-addr.arpa. 86400 IN NS ns4.apnic.net. > 194.in-addr.arpa. 86400 IN NS pri.authdns.ripe.net. > 194.in-addr.arpa. 86400 IN NS sns-pb.isc.org. > 194.in-addr.arpa. 86400 IN NS tinnie.arin.net. > 194.in-addr.arpa. 86400 IN DS 50849 8 2 > 7B0F17B502B365DC66849267872E29DF457EB8261A5A73F0D75FF1E7 1466F278 > 194.in-addr.arpa. 86400 IN RRSIG DS 8 3 86400 > 20180429020750 20180407202433 43878 in-addr.arpa. > IxXCGBya9Toa2uoYFCFuWDUMrvwTTmzLFFFfTjVd9rltJKspoAtL561N > RYbPp37V4WZK4MCVAu7Q+E4oj5z9Sc1fcmu5jgv40MEJ0ZGKYj174mzq > fTc7jmB5DnNOsAIWBJ3lIOfSNo5glCHGbOVONaXlWpYp8McJKL74W24i gKA= > ;; Received 436 bytes from 199.253.183.183#53(b.in-addr-servers.arpa) > in 31 ms > > 214.194.in-addr.arpa. 172800 IN NS ns2.renater.fr. > 214.194.in-addr.arpa. 172800 IN NS ns1.renater.fr. > 214.194.in-addr.arpa. 172800 IN NS ns2.nic.fr. > 214.194.in-addr.arpa. 172800 IN NS ns.ripe.net. > 214.194.in-addr.arpa. 3600 IN NSEC 215.194.in-addr.arpa. NS > RRSIG NSEC > 214.194.in-addr.arpa. 3600 IN RRSIG NSEC 8 4 3600 > 20180508171131 20180408161131 16836 194.in-addr.arpa. > aT8455YQybGrfQd6h52prDLnFZ01xFmSFAHoq2Y8fWF29MBCp+OJ4WHx > GPoV6tNn2ISOaV18uWz62lcUZj8/v0hD0Dw/PSCrxIHg1ftREWV7IE8p > 6smXcLms3VOK+GlXY0zFDb36e+bFc5gFapEE2MAgKT7Kd6TQkTrZlldx GNo= > ;; Received 364 bytes from 200.3.13.14#53(ns3.lacnic.net) in 232 ms > > *214.194.in-addr.arpa. 86400 IN SOA ns1.renater.fr. > hostmaster.renater.fr. 2015012387 28800 7200 604800 172800** > ;; Received 114 bytes from 192.93.0.4#53(ns2.nic.fr) in 9 ms* pour moi, la réponse de ns2.nic.fr et ns.ripe.net n'est pas cohérente (aucun NS) avec celle de ns1.renater.fr Pouvez-vous me confirmer ce diagnostic (ou me dire si je m'y prends comme un manche) Merci d'avance pour vos éclaircissements, Cordialement, -- Gilles BRUNO Direction du Systeme d'Information (DGDSI) Universite Grenoble Alpes (UGA) Domaine Universitaire - Batiment IMA B - Bureau 207 41 rue des Mathematiques 38400 SAINT MARTIN D'HERES