Hi Matt, Unbound has a default local-zone for that address range. Since local-zones are applied before the auth-zone this default is used for your query.
You can override the default like this: local-zone: "0.0.10.in-addr.arpa." transparent -- Ralph On 11-07-19 12:55, Matt Schwartz via Unbound-users wrote: > Hi Ralph, > > Thank you for your response. I made the changes that you suggested. Here > is what my zone declaration looks like: > auth-zone: > name: "0.0.10.in-addr.arpa." > zonefile: "/etc/unbound/meow.lan.rev" > > Here is what my zone file looks like: > $TTL 30m > $ORIGIN 0.0.10.in-addr.arpa. > > @ SOA 0.0.10.in-addr.arpa. hostmaster.meow.lan. ( > 2019071105 ;Serial > 30m ;Refresh > 15m ;Retry > 4w ;Expire > 30m) ;Min TTL > @ IN NS bast.meow.lan. > 1 IN PTR bast.meow.lan. > 2 IN PTR jaguar.meow.lan. > 3 IN PTR ida.meow.lan. > 4 IN PTR ollie.meow.lan. > > All reverse DNS queries result in an NXDOMAIN. I am sure I am doing > something wrong. > > Thank you again, > Matt > > On Thu, Jul 11, 2019 at 5:39 AM Ralph Dolmans via Unbound-users > <[email protected] <mailto:[email protected]>> wrote: > > Hi Matt, > > I assume you are querying for 1.0.0.10.in-addr.arpa, this domain is not > part of your 0.0.0.10.in-addr.arpa zone and therefore is resolved > without using the auth-zone. > > Try using an auth zone for 1.0.0.10.in-addr.arpa itself, or a parent > like 10.in-addr.arpa. > > -- Ralph > > On 08-07-19 03:19, Matt Schwartz via Unbound-users wrote: > > Hello list, > > > > I have been playing with Unbound's new-ish auth-zone feature and it's > > great. However, when I set up an auth-zone for reverse DNS, drill > > returns an NXDOMAIN. Has this just not been implemented yet? As a > > work-around I've done the following inside of unbound.conf > > > > local-zone: "0.0.0.10.in-addr.arpa" transparent > > local-data-ptr: "10.0.0.1 myhost.mydomain" > > > > I had the following auth-zone for reverse DNS but it did not work. > > auth-zone: > > name: "0.0.0.10.in-addr.arpa" > > zonefile: /etc/unbound/myzone > > for-downstream: yes > > > > Thanks, > > Matt >
