[DNSSEC-Ops] Help

[Amreesh Phokeer]

Hi Ahmed,

We have this in the WHOIS DB:

Amreeshs-MBP:~ amreesh$ whois -hwhois.afrinic.net  -rB 225.41.196.in-addr.arpa
% This is the AfriNIC Whois server.

% Information related to '225.41.196.in-addr.arpa'

domain:         225.41.196.in-addr.arpa
descr:          ICOSNET spa Alger, Algerie
org:            ORG-SI2-AFRINIC
admin-c:        AZ1-AFRINIC
tech-c:         AZ1-AFRINIC
zone-c:         AZ1-AFRINIC
nserver:        ns1.aloline.com
nserver:        ns2.aloline.com
ds-rdata:       18037 5 2 47B8EC8824FEDCE6CE0D4DED069AEEFB2887CA2A650756005D64BB78FBBC28C2
mnt-by:         ICOSNET-MNT
mnt-lower:      ICOSNET-MNT
changed:        zerkouk at icosnet.com 20061001
changed:        abuse at icosnet.net 20181018
changed:        abuse at icosnet.net 20181021
source:         AFRINIC

We see this in our DNS:

; <<>> DiG 9.10.6 <<>> 225.41.196.in-addr.arpa @ns1.afrinic.net NS
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63983
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 3

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;225.41.196.in-addr.arpa.	IN	NS

;; ANSWER SECTION:
225.41.196.in-addr.arpa. 262800	IN	NS	ns1.aloline.com.
225.41.196.in-addr.arpa. 262800	IN	NS	ns2.aloline.com.

;; ADDITIONAL SECTION:
ns1.aloline.com.	3600	IN	A	196.41.225.10
ns2.aloline.com.	3600	IN	A	196.41.225.11

;; Query time: 659 msec
;; SERVER: 2001:42d0::200:2:1#53(2001:42d0::200:2:1)
;; WHEN: Mon Oct 22 14


And everything seems to be in place when I check on DNSViz:
http://dnsviz.net/d/225.41.196.in-addr.arpa/dnssec/

Well done.

Cheers
Amreesh








> On 22 Oct 2018, at 14:43, Ahmed ZERKOUK <Ahmed.ZERKOUK at icosnet.com> wrote:
> 
> Hi Amreesh,
> 
> Could you please check for 225.41.196.in-addr.arpa authoritative  name server are ns1.aloline.com and ns2.aloline.com
> 
> please advise ASAP. Thanks
> 
> 
> 
> -----Original Message-----
> From: Amreesh Phokeer <amreesh at afrinic.net> 
> Sent: mercredi 17 octobre 2018 12:47
> To: Ahmed ZERKOUK <Ahmed.ZERKOUK at icosnet.com>
> Cc: dnssec-ops at afrinic.net; Tawfik BOURICHE <Tawfik.BOURICHE at icosnet.com>; Ahmed MORSLI <Ahmed.MORSLI at icosnet.com>
> Subject: Re: [DNSSEC-Ops] Help
> 
> Hi Ahmed,
> 
>> On 17 Oct 2018, at 00:17, Ahmed ZERKOUK <Ahmed.ZERKOUK at icosnet.com> wrote:
>> 
>> The authoritative  name server for 11.140.197.in-addr.arpa is dns1.icosnethosting.com.
> 
> Have you signed the zone? I was not able to retrieve the DNSKEY from the zone.
> Once you have the DNSKEY, you can generate the DS and send it to the parent.
> 
>> 
>> Also we have the same problem with for ex. 9.140.197.in-addr.arpa that have ns1.aloline.com as authoritative name server .
> 
> See errors from DNSViz
> 
> http://dnsviz.net/d/9.140.197.in-addr.arpa/dnssec/
> 
> Errors (5)
> 	• 9.140.197.in-addr.arpa zone: The server(s) did not respond authoritatively for the namespace. (196.41.225.10, 196.41.225.11)
> 	• 9.140.197.in-addr.arpa/MX (NODATA): The response was an upward referral. (196.41.225.10, 196.41.225.11, UDP_0_EDNS0_32768_4096, UDP_0_EDNS0_32768_512)
> 	• 9.140.197.in-addr.arpa/NS (NODATA): The response was an upward referral. (196.41.225.10, 196.41.225.11, UDP_0_EDNS0_32768_4096)
> 	• 9.140.197.in-addr.arpa/SOA (NODATA): The response was an upward referral. (196.41.225.10, 196.41.225.11, TCP_0_EDNS0_32768_4096, UDP_0_EDNS0_32768_4096)
> 	• 9.140.197.in-addr.arpa/TXT (NODATA): The response was an upward referral. (196.41.225.10, 196.41.225.11, UDP_0_EDNS0_32768_4096) Warnings (2)
> 	• in-addr.arpa to 197.in-addr.arpa: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the in-addr.arpa zone): ns2.lacnic.net
> 	• in-addr.arpa to 197.in-addr.arpa: The following NS name(s) were found in the delegation NS RRset (i.e., in the in-addr.arpa zone), but not in the authoritative NS RRset: ns3.lacnic.net
> 
> Regards,
> Amreesh