1. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E APNIC Open Address Policy Meeting APNIC Reverse DNS October 26th, Brisbane Bruce Campbell bruce_campbell@apnic.net

2. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Purpose of APNIC Reverse DNS  Delegation of IP space from APNIC to ISPs etc. (in-addr.arpa / ip6.int )  Not automatically set up as part of an IP allocation from APNIC.

3. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Reverse Delegations  Stored in APNIC WHOIS database as domain objects.  Automatic form checks domain and nameserver configuration for sanity  ‘Sanity’ is at least two nameservers, and information consistent across nameservers and form (ie, SOA same, NS list same, authority set)  Assumes knowledge of Reverse DNS

4. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E What is a Domain Object?  Domain: 63.62.61.in-addr.arpa  Descr: Server and Office Subnet  Country: AU  Admin-c: (APNIC) NIC-HDL  Tech-c: (APNIC) NIC-HDL  Zone-c: (APNIC) NIC-HDL  nserver: ns1.my.forward.domain  nserver: ns.some.faraway.site

5. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E What is a Domain Object (2) ?  Remarks: free text  notify: Database emails this address  mnt-by: MAINT-My-Maintainer-Object  mnt-lower: MAINT-My-Maintainer-Object  changed: email@address YYYYMMDD  source: APNIC  Standard APNIC database object.

6. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Limitations  Classful delegations (limited to the ‘.’ boundaries). (/19 allocation must delegate 32 /24s)  Not telepathic, must request (re)delegation.  Must have nameservers set up before requesting delegation.  Changes made public (officially) only once per business day (10am, UTC+1000) on ns.apnic.net.

7. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Via Email  Standard APNIC database object, can be updated via email.  Nameserver/domain set up verified before being submitted to the database.  Protection by maintainer object (current auths of NONE, Email address, password or PGP).  No zone file rebuilds occur on weekends.

8. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E On the Web and Interactive  Http://www.apnic.net/db/domain.html

9. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Online Errors (also via Email)

10. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Request Sent to APNIC

11. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Successful Update

12. A S I A P A C I F I C N E T W O R K I N F O R M A T I O N C E N T R E Questions?  Dns-admin@apnic.net