[anti-abuse-wg] Reverse DNS delegations

It depends on the LIR – some let you, some don’t.
And no, you don’t own the IPs – the LIR does


--
Mr Michele Neylon
Blacknight Solutions
Hosting, Colocation & Domains
https://www.blacknight.com/
https://blacknight.blog/
Intl. +353 (0) 59  9183072
Direct Dial: +353 (0)59 9183090
Personal blog: https://michele.blog/
Some thoughts: https://ceo.hosting/
-------------------------------
Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland  Company No.: 370845

I have sent this email at a time that is convenient for me. I do not expect you to respond to it outside of your usual working hours.


From: Alessandro Vesely <vesely at tana.it>
Date: Friday, 5 April 2024 at 16:24
To: Michele Neylon - Blacknight <michele at blacknight.com>, anti-abuse-wg <anti-abuse-wg at ripe.net>
Subject: Re: [anti-abuse-wg] Reverse DNS delegations
[EXTERNAL EMAIL] Please use caution when opening attachments from unrecognised sources.

On Fri 05/Apr/2024 14:41:01 +0200 Michele Neylon - Blacknight via anti-abuse-wg wrote:
> Have you asked them to setup PTR records?


I did so for IPv4.  They're unable to delegate but can set PTRs.

For IPv6, they don't have delegation for their own range, so cannot possibly resolve mine.


> We usually do it for our clients, so I’ve no idea how others handle it


Why can't users of a given range set up their own delegation?  I know it should be hierarchical, but in case RIPE did not delegate anything (found SOA 0.a.2.ip6.arpa. dns.ripe.net) couldn't they delegate directly after proof of "ownership"?


Best
Ale



> --
> Mr Michele Neylon
> Blacknight Solutions
> Hosting, Colocation & Domains
> https://www.blacknight.com/
> https://blacknight.blog/
> Intl. +353 (0) 59  9183072
> Direct Dial: +353 (0)59 9183090
> Personal blog: https://michele.blog/
> Some thoughts: https://ceo.hosting/
> -------------------------------
> Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park,Sleaty Road,Graiguecullen,Carlow,R93 X265,Ireland  Company No.: 370845
>
> I have sent this email at a time that is convenient for me. I do not expect you to respond to it outside of your usual working hours.
>
>
> From: anti-abuse-wg <anti-abuse-wg-bounces at ripe.net> on behalf of Alessandro Vesely <vesely at tana.it>
> Date: Friday, 5 April 2024 at 13:01
> To: anti-abuse-wg <anti-abuse-wg at ripe.net>
> Subject: [anti-abuse-wg] Reverse DNS delegations
> [EXTERNAL EMAIL] Please use caution when opening attachments from unrecognised sources.
>
> Hi all,
>
> what's the policy for reverse delegation?  My provider assigned me a 2a02:29e1:500:6c00::/56.  Great.  However they didn't delegate reverse DNS.  Indeed, their own 2a02:29e1::/32 has no delegations:
>
> ; <<>> DiG 9.18.24-1-Debian <<>> 1.e.9.2.2.0.a.2.ip6.arpa ns
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 19800
> ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
>
> ;; OPT PSEUDOSECTION:
> ; EDNS: version: 0, flags:; udp: 1232
> ; COOKIE: cad8ae482b0e559c01000000660fe49763aa815e05fda159 (good)
> ;; QUESTION SECTION:
> ;1.e.9.2.2.0.a.2.ip6.arpa.      IN      NS
>
> ;; AUTHORITY SECTION:
> 0.a.2.ip6.arpa.         3600    IN      SOA     pri.authdns.ripe.net. dns.ripe.net. 1712314758 3600 600 864000 3600
>
>
> Now there are mail servers which reject mail if they don't find a matching PTR:
>
>    <<< 554 resimta-c2p-559421.sys.comcast.net resimta-c2p-559421.sys.comcast.net 2a02:29e1:500:6c00::4 Comcast requires that all mail servers must have a PTR record with a valid Reverse DNS entry. Currently your mail server does not fill that requirement. For more information, refer to: https://postmaster.comcast.net/smtp-error-codes.php#554
>
>
> Why isn't it possible to gain a delegation by proving number assignment?
>
>
> Best
> Ale
> --
>
>
>
>
>
>
>
>
> --
>
> To unsubscribe from this mailing list, get a password reminder, or change your subscription options, please visit: https://mailman.ripe.net/
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </ripe/mail/archives/anti-abuse-wg/attachments/20240405/1abbb2bf/attachment.html>