Проблемы при регистрации ДНС сервера в RIPE base

[longlike]

При создании объекта domain в базе ripe получаю такую ошибку:
glue nameserver ns1.xxxx.ru must be within the domain that is being delegated.

Подскажите куда смотреть.

[root]

дай полное содержимое создаваемого объекта

[longlike]

***Info: Parent has RIPE NCC nameservers.
***Info: Authorisation for parent [inetnum] xxx.xxx.0.0 - xx.xx.yy.255 using mnt-domains: authenticated by: Uni-mnt
***RDNS: (related to set) ERROR (20 points): The glue nameserver ns2.xxxx.ru must be within the domain that is being delegated.
***RDNS: (related to set) ERROR (20 points): The glue nameserver ns1.xxxx.ru must be within the domain that is being delegated.
***RDNS: (related to set) INFO: The delegated nameservers ns1.xxxx.ru (xx.xxx.0.100) and ns2.xxxx.ru (xxx.xxx.0.101) may not be on the same subnet.
***RDNS: (related to ns2.xxxx.ru) ERROR (20 points): Could not get an SOA record from ns2.xxxx.ru (xxx.xxx.0.101).
***RDNS: (related to ns1.xxxx.ru) INFO: The mname (primary nameserver) 0.xxxx.ru in the SOA record listed at this server is not in the list of servers at this nameserver (ns2.xxxx.ru, ns1.xxxx.ru).
***RDNS: (related to ns1.xxxx.ru) ERROR (20 points): Could not look up an IP address for the mname (primary nameserver) 0.unibit.ru listed in the SOA record at this server.
***RDNS: (related to ns1.unibit.ru) INFO: The expire value 604800 (1 week) in the SOA record returned by this nameserver is not within the suggested range. RFC 1912 recommends between two and four weeks for this value.
***Error: There are 20 or more problem points. Delegation was not successful.
***Error: RDNS Authorisation failed

[root]

это не то
сам объект, это то что ты и засылаешь на "submit"
например:

Код: Выделить всё

domain:          32.150.217.in-addr.arpa
descr:           Reverse delegation for TRANS-TELECOM-NET
remarks:         INFRA AW
admin-c:         KTTK-RIPE
tech-c:          KTTK-RIPE
zone-c:          KTTK-RIPE
nserver:         dns-prim.transtk.ru
nserver:         dns-sec.transtk.ru
nserver:         ns.transtelecom.net
nserver:         ns1.transtelecom.net
mnt-by:          TRANSTELECOM-MNT

[longlike]

Спасибо!

[root]

Спасибо!

пжалста конечно, если бы понять ещё за что

[domainer]

Здравствуйте. Абсолютно такая же проблема. Выдает те же ошибки..

***Info: Authorisation for parent [inetnum] 94.229.240.0 - 94.229.247.255
using mnt-by:
authenticated by: MNT-NEOCOM

***RDNS: (related to set) ERROR (20 points): The glue nameserver dns1.vrangel.ru must be within the domain that is being delegated.
***RDNS: (related to set) ERROR (20 points): The glue nameserver rel.vrangel.ru must be within the domain that is being delegated.
***RDNS: (related to set) INFO: Several tests were skipped for one or more servers having the version of the zone with serial number 2010052023, which had already been checked.
***RDNS: (related to dns1.vrangel.ru) INFO: Could not find a PTR record mapping 94.229.247.1 to dns1.vrangel.ru. For every IP address there should be a matching PTR record registered Please see RFC1912, section 2.1 for more information.
***RDNS: (related to dns1.vrangel.ru) INFO: The nameserver ns4.nic.ru was found listed for the zone at dns1.vrangel.ru (94.229.247.1), but was not one of the delegated nameservers (dns1.vrangel.ru, rel.vrangel.ru).
***RDNS: (related to dns1.vrangel.ru) INFO: The nameserver ns8.nic.ru was found listed for the zone at dns1.vrangel.ru (94.229.247.1), but was not one of the delegated nameservers (dns1.vrangel.ru, rel.vrangel.ru).
***Error: There are 20 or more problem points. Delegation was not successful.

***Error: RDNS Authorisation failed

Отсылаю следующее:

domain: 240.229.94.in-addr.arpa
descr: ReVeRsE ZoNe
mnt-by: MNT-NEOCOM
nserver: rel.vrangel.ru 62.33.172.5
nserver: dns1.vrangel.ru 94.229.247.1
admin-c: KR1414-RIPE
tech-c: KR1414-RIPE
zone-c: KR1414-RIPE
changed: admin@vrangel.ru 20100521
source: RIPE

Не пойму что ему надо..

[lehisnoe]

Привет!
На серверах

nserver: rel.vrangel.ru 62.33.172.5
nserver: dns1.vrangel.ru 94.229.247.1

должны быть прописаны реверсные зоны для 94.229.240.0 - 94.229.247.255, т.к. RIPE в момент апдейта проверяет работоспособность серверов на предмет обслуживания прописываемых реверсных зон.

[domainer]

Реверсные зоны на серверах прописаны:
240.229.94.in-addr.arpa
241.229.94.in-addr.arpa
------
247.229.94.in-addr.arpa


запрос отсылал и так:
domain: 240.229.94.in-addr.arpa

и так:
domain: 240-247.229.94.in-addr.arpa

НО не проходит. Ответ один:
The glue nameserver dns1.vrangel.ru must be within the domain that is being delegated
The glue nameserver rel.vrangel.ru must be within the domain that is being delegated.

Написал в РАЙП. Прислали ответ:
You are trying to make a Reverse DNS Delegation for this IP range
94.229.240.0 - 94.229.247.255 This is a /21.
Reverse DNS Delegations cannot be created on /21.

Please follow the instructions on this site
http://www.ripe.net/reverse/reverse_howto.html

??????????????????

[root]

и так:
domain: 240-247.229.94.in-addr.arpa

так точно не надо.

тебе нуна содавать реверсы для каждой подсети /24:

Step 2: Preparing the Reverse Delegation
Because of how DNS works, you will need to chop your address block into "chunks" that can be delegated.
For an IPv4 address block, you will have to create one or multiple /24 or /16 type address blocks mapped into in-addr.arpa domains
For IPv6, you will have to map a /32 address block into the ip6.arpa domain

Для домена у тя указаны:

Код: Выделить всё

vrangel.ru.             3319    IN      NS      rel.vrangel.ru.
vrangel.ru.             3319    IN      NS      dns1.vrangel.ru.
vrangel.ru.             3319    IN      NS      ns4.nic.ru.
vrangel.ru.             3319    IN      NS      ns8.nic.ru.

rel.vrangel.ru, dns1.vrangel.ru - знают о реверсе этих зон, а вот ns4.nic.ru, ns8.nic.ru нет.
что у тя в обратных зонах в кач-ве NS указано ? покажи файл зоны на master`е.
убери оттуда сервера nic.ru, если они там есть

NS Servers
Make sure that you have at least two name servers that are authoritative for the zone. The resolvable names of these NS servers should be in the NS resource records of the zone. The name servers should be on different subnets.

на slave, ыт эти зоны как slave надеюсь прописал ?

далее он не мог найти обратку для dns1.vrangel.ru, но сейчас я вижу что она есть:

Код: Выделить всё

nslookup 94.229.247.1 62.33.172.5

Server: 62.33.172.5
Address: 62.33.172.5#53

1.247.229.94.in-addr.arpa name = dns1.vrangel.ru.

Отсылаю следующее:
.........
nserver: rel.vrangel.ru 62.33.172.5
nserver: dns1.vrangel.ru 94.229.247.1

IP-адреса dns серверов можно не указываь, RIPE и так их найдет

***RDNS: (related to set) INFO: Several tests were skipped for one or more servers having the version of the zone with serial number 2010052023, which had already been checked.

убедись что slave DNS имеет такую же версию зоны как и master