A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E APNIC Open Address Policy Meeting APNIC Reverse DNS October 26th, Brisbane Bruce Campbell

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Purpose of APNIC Reverse DNS  Delegation of IP space from APNIC to ISPs etc. (in-addr.arpa / ip6.int )  Not automatically set up as part of an IP allocation from APNIC.

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Reverse Delegations  Stored in APNIC WHOIS database as domain objects.  Automatic form checks domain and nameserver configuration for sanity  ‘Sanity’ is at least two nameservers, and information consistent across nameservers and form (ie, SOA same, NS list same, authority set)  Assumes knowledge of Reverse DNS

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E What is a Domain Object?  Domain: in-addr.arpa  Descr: Server and Office Subnet  Country: AU  Admin-c: (APNIC) NIC-HDL  Tech-c: (APNIC) NIC-HDL  Zone-c: (APNIC) NIC-HDL  nserver: ns1.my.forward.domain  nserver: ns.some.faraway.site

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E What is a Domain Object (2) ?  Remarks: free text  notify: Database s this address  mnt-by: MAINT-My-Maintainer-Object  mnt-lower: MAINT-My-Maintainer-Object  changed: YYYYMMDD  source: APNIC  Standard APNIC database object.

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Limitations  Classful delegations (limited to the ‘.’ boundaries). (/19 allocation must delegate 32 /24s)  Not telepathic, must request (re)delegation.  Must have nameservers set up before requesting delegation.  Changes made public (officially) only once per business day (10am, UTC+1000) on ns.apnic.net.

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Via  Standard APNIC database object, can be updated via .  Nameserver/domain set up verified before being submitted to the database.  Protection by maintainer object (current auths of NONE, address, password or PGP).  No zone file rebuilds occur on weekends.

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E On the Web and Interactive 

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Online Errors (also via )

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Request Sent to APNIC

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Successful Update

A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Questions? 