Local PTR for private addresses

Paulo Roberto Tomasi pztomasi at gmail.com
Wed Dec 16 13:00:00 UTC 2020


Hi,

I would like to setup local PTR entries for private address - to get
meaningful names to IP address running inside OSPF/MPLS cloud in
traceroutes.

My current unbound config is this:

# DNSSEC anchor key
auto-trust-anchor-file: "/var/lib/unbound/root.key"

# Root Servers information
root-hints: "/var/lib/unbound/root.hints"

# Setting  this to "iterator" will result in a non-validating server.
# Setting this to  "validator  iterator" will  turn on DNSSEC validation.
module-config: "validator iterator"

Then, I've created a local-zone file like this:

root at unbound:~# cat /var/unbound-zones/zone-local
local-data-ptr: "10.50.0.169 RTR-PE-BNR-APT-01.zone.local"
local-data-ptr: "10.50.0.173 SW3-P-CZN-C01-01.zone.local"
local-data-ptr: "10.50.0.174 RTR-PE-BNR-APT-01.zone.local"
local-data-ptr: "10.50.0.177 SW3-P-CZN-C01-01.zone.local"
local-data-ptr: "10.50.0.178 RTR-PE-JNA-C01-01.zone.local"
local-data-ptr: "10.50.0.181 RTR-PE-JUW-C01-01.zone.local"
local-data-ptr: "10.50.0.182 RTR-PE-CTQ-C01-01.zone.local"
local-data-ptr: "10.50.0.189 RTR-PE-JUW-C01-01.zone.local"
local-data-ptr: "10.50.0.190 SW3-P-JXA-C01-01.zone.local"
local-data-ptr: "10.50.0.193 RTR-PE-JUW-C01-01.zone.local"
local-data-ptr: "10.50.0.194 RTR-PE-BNR-APT-01.zone.local"
local-data-ptr: "10.50.0.197 RTR-PE-JUW-C01-01.zone.local"
local-data-ptr: "10.50.0.198 RTR-PE-BNR-C01-01.zone.local"
local-data-ptr: "10.50.0.201 RTR-PE-JUW-C01-01.zone.local"
local-data-ptr: "10.50.0.202 SW3-P-CZN-C01-01.zone.local"
:::

Is it possible to set up this scenario? Even with "validator iterator" mode?

Thank you!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20201216/cdd82f20/attachment-0001.htm>


More information about the Unbound-users mailing list