Questions tagged as ['reverse-dns']

I would like to stop Apache (2.2) from doing reverse lookups for client IP addresses. I have

HostnameLookups Off

and

LogFormat "%h %l %u %t %V \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\" port:%p" combined_vhost
LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"" combined
LogFormat "%h %l %u %t \"%r\" %>s %b" common

in httpd.conf but Apache still in many cases often ...

I'm a server noob and want to get some solution or some advice from the gurus of the ServerFault. I currently have two different live websites running and they both are using the shared web hosting servers. But I need to have those two websites to have an individual rDNS record set up for each and to work that out, it seems like I need to have those two websites migrate to two different dedicated server ...

We have a self-hosted mail server at our business's single, static IP address (mail.companyA.com). Our website is hosted by another company at a different IP address (companyA.com). Our emails use the @companyA.com domain.

Sometimes we send emails to certain clients that get through fine, and sometimes we get bouncebacks from the same client indicating we are blocked. Short-story: I am concerned  ...

I've set up a BIND9 DNS Server. It should only do forwarding:

• local.domain1 - forwarders 172.24.16.10 / 172.24.16.11
• local.domain2 - forwarder x.x.x.x
• internet - forwarders 8.8.8.8 / 8.8.4.4

My files look like:

named.conf

acl internals { 127.0.0.0/8; 172.24.0.0./14; 10.42.42.0/24; };
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.defaul ...

The question I have is the same as this one, but the accepted answer, and the comments did not helped me solve my issue. I'll put here the whole setup that I have.

BIND9 version - BIND 9.11.5-P4-5.1+deb10u6-Debian (Extended Support Version),

OS - Debian Buster (10.11)

named.conf:

// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README. ...

I'm looking for a way to filter a packet capture in wireshark for instances where our server responds with "Refused" to a recursive DNS query.

dns.resp.type== doesn't seem to offer anything that I see as a match to my request, do I need to look somewhere other than under dns.resp altogether?

Before anyone answers "ask your ISP" or "ask your hosting provider", please read in full.

Scenario:

• I own a domain name mydomain.example, and a publically routed IP block (say 192.0.2.0/28)
• The NS records (GLUE) for this domain are configured at my registrar - ns1.mydomain.example and ns2.mydomain.example which point to my servers (self-hosted DNS servers)
• Reverse DNS for my publically routed IP ...

First, I apologize if this isn't the right forum as this is somewhat of a networking question.

To give a brief explanation of what I want to achieve is basically have the services or apps provided by Synology be accessible via a simple URL without port numbers. I have a dedicated IP address, so I don't have to worry about setting up DDNS.

I thought all I would need to do is setup a very small NGINX s ...

I have a VPS with a single IP address and multiple domain names.

I used mail-tester.com to check the spam rate of my email. And my results are:

    Your IP address 93.123.12.43 is associated with the domain 2132217.myisp.net.
    Nevertheless your message appears to be sent from mail.example.com.
    You may want to change your pointer (PTR type) DNS record and the host name of your server to the same ...

When I use dmarcanalyzer to check my domain I get the message:

Warning : You shouldn't use PTR lookups as they are deprecated

My record looks like this: v=spf1 ptr:samplemail.com ip4:191.13.174.145 ip4:191.13.174.146 a:samplemail.com ip4:81.211.16.14 ~all

What part exactly is deprecated? I tried Googling but all I get are sites where I can do a PTR record lookup or unclear (to me) examaples.

Can I add multiple PTR records mapping multiple IPV6 addresses to the same domain, and add multiple AAAA records mapping the same domain to to the same set of IPV6 addresses, to let pass the iprev check?

Occasionally, I open a ticket at my VPS provider to let them create a rDNS record for me. Sometimes, I can find a page in my control panel to add the rDNS record myself. This is simple for ipv4 address. I just input an ip address and a domain name to create the rDNS record. I wonder how to add rDNS record for a block of ipv6 addresses such as a 2^64 address block. Do I have to add 2^64 rDNS records each ...

Can I use Kubernetes dns service to whitelist the domains for my pods? I want to restrict the outgoing (egress) calls using Kubernetes dns service. if I can achieve this, can someone let me know the steps required to implement this.
Note: I see in my default pods that coredns pod is already present with image: rancher/coredns-coredns:1.8.3. I understand that it comes default with k3s.

PS: I have  ...

I'm emulating a network using Kathara (similar to Netkit) and I'm having trouble figuring out how to get reverse DNS to work across all three networks.

This is the topology

And this is the DNS hierarchy

I did manage to get recursive lookup to work. When queried for a name not in its database, ns.as1.net would query nsroot, then go down the hierarchy, finally getting a response from the authoritativ ...

We're setting up a system where each of our users gets their own subdomain of companymail.com for sending / receiving emails, and they can set up multiple mailboxes under that subdomain. We also want to allow them to use their own domain. E.g.:

Main domain: companymail.com.

User 1 has two mailboxes set up:

mail@user1.companymail.com
support@user1.companymail.com

User 2 has one mailbox set up:

mai ...