<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>I think you are hitting built-in empty zones for private AS112
address ranges. You can query local zone by:<br>
</p>
<p>dig @localhost +norec 10.in-addr.arpa soa</p>
<p>If it contains localhost, then unbound is serving own empty zone.
You need to override 10.in-addr.arpa zone with you content. Local
zone data is preferred over remote data. Easiest solution would be
expanding it to whole 10.0.0.0/8, as have been already is
recommeded.</p>
<p>You would have to create built-in NS entry pointing to <span
style="white-space: pre-wrap">10.0.0.14.</span><span
style="white-space: pre-wrap">
</span></p>
<p><span style="white-space: pre-wrap">10.in-addr.arpa. 600 IN NS your-ns-name.example.net.</span></p>
<p><span style="white-space: pre-wrap">Where </span><span
style="white-space: pre-wrap">your-ns-name.example.net. would be whatever</span><span
style="white-space: pre-wrap"> 10.0.0.14 has as its name.</span></p>
<p></p>
<pre class="moz-quote-pre" wrap="">stub-zone:
name: "10.in-addr.arpa."
stub-addr: 10.0.0.14</pre>
<p></p>
<div class="moz-cite-prefix">On 04. 10. 24 22:49, April Conger via
Unbound-users wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CABx8zhDaEj2CD5TVh+sYO1+gf7Qi73Q+GqGQC9KOkX63XxNbVw@mail.gmail.com">
<pre class="moz-quote-pre" wrap="">Hi all,
I'm setting up Unbound in my home lab and am having trouble forwarding PTR
queries to my Knot DNS server. My A queries for `econger.net` work fine,
but reverse lookups for the 10.0.0.0/24 range appear to follow the normal
recursion path to the root servers, as indicated by my query logs.
Here is my test configuration:
remote-control:
control-enable: yes
control-interface: /run/unbound.ctl
server:
verbosity: 3
log-servfail: yes
auto-trust-anchor-file: "/var/lib/unbound/root.key"
qname-minimisation: yes
interface: 10.0.0.11
access-control: 10.0.0.0/16 allow
private-address: 10.0.0.0/24
private-domain: econger.net.
private-domain: 0.0.10.in-addr.arpa.
stub-zone:
name: "econger.net."
stub-addr: 10.0.0.14
stub-zone:
name: "0.0.10.in-addr.arpa."
stub-addr: 10.0.0.14
While the econger.net stub works fine, the 0.0.10.in-addr.arpa stub does
not. I also tried configuring these as forward-zone entries using
forward-addr, but I got the same result.
Here’s the error I see during reverse lookups:
root@raspy1:/etc/unbound# nslookup 10.0.0.1 10.0.0.11
** server can't find 1.0.0.10.in-addr.arpa: NXDOMAIN
However, querying the same address directly from my Knot DNS server works
fine:
root@raspy1:/etc/unbound# nslookup 10.0.0.1 10.0.0.14
1.0.0.10.in-addr.arpa name = fw1.econger.net.
I'm using Unbound version 1.19.2-1ubuntu3.2 on Ubuntu 24.04.1 on a
Raspberry Pi 3 B+, and Knot DNS version 3.3.4-1.1build2 on the same
hardware/OS combo.
Any advice on what might be wrong or how to resolve the issue would be
greatly appreciated!
Thanks,
April
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Petr Menšík
Software Engineer, RHEL
Red Hat, <a class="moz-txt-link-freetext" href="http://www.redhat.com/">http://www.redhat.com/</a>
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB</pre>
</body>
</html>