绑定9外部反向查找DNS问题

我在Centos 5.10上运行一组bind9 DNS服务器时遇到问题

这些服务器位于内部networking上,通过面向互联网的networking架构进行NAT,使外部资源能够查找bind9服务器托pipe的外部DNS名称和IP。

绑定反向区域文件的内容是:

$ORIGIN . $TTL 86400 ; 1 day 114.X.41.in-addr.arpa. IN SOA dns001dns01.myorg.com. hostmaster.myorg.com. ( ;;@ IN SOA dns001dns01.myorg.com. hostmaster.myorg.com. ( 2008110934 10800 3600 604800 0 ) IN NS dns001dns01.myorg.com. IN NS dns001dns02.myorg.com. IN NS dns001dns03.myorg.com. $ORIGIN 114.X.41.in-addr.arpa. 2 IN PTR mail.myorg.com. 12 IN PTR exchmail3.myorg.com. 15 IN PTR online.myorg.com. 16 IN PTR exchmail2.myorg.com. 37 IN PTR toprms.myorg.com. 5 IN PTR appraisalworkflow.myorg.com. 14 IN PTR exchmail5.myorg.com. 78 IN PTR exchmail.myorg.com. 

configuration节:

 zone "AAA.X.41.in-addr.arpa" IN { type master; notify yes; file "41.X.AAA.rev"; allow-query { any;}; allow-update { key rndckey; }; allow-transfer { 172.30.0.41; 172.30.0.42; 172.20.50.52; }; 

};

正向查找效果很好,正向和反向查找在服务器和服务器连接的内部networking之间都能正常工作。 但是,外部REVERSE查找失败。

是否有可能跟踪反向域名logging停止的位置,以及哪个服务器是特定域的授权反向查找服务器? (我希望我是有道理的,如果不是的话,很抱歉)

我试图从我的电脑到反面区域挖掘一些痕迹(道歉,看起来如何,试图用一点模糊来保护无辜者)。 许多坏(水平)转介表明有什么不对,但请问它是什么? 见下文:

  ; <<>> DiG 9.9.5-3-Ubuntu <<>> -x 41.X.AAA.14 +trace ;; global options: +cmd . 8479 IN NS i.root-servers.net. . 8479 IN NS k.root-servers.net. . 8479 IN NS f.root-servers.net. . 8479 IN NS m.root-servers.net. . 8479 IN NS g.root-servers.net. . 8479 IN NS e.root-servers.net. . 8479 IN NS c.root-servers.net. . 8479 IN NS h.root-servers.net. . 8479 IN NS j.root-servers.net. . 8479 IN NS l.root-servers.net. . 8479 IN NS b.root-servers.net. . 8479 IN NS d.root-servers.net. . 8479 IN NS a.root-servers.net. . 8479 IN RRSIG NS 8 0 518400 20140603000000 20140526230000 40926 . gsG1xrmc32HKMscG4pEQjgTNg2UOKgXTEZEGjg5lY9X14ADCwNleAwfN XkeAS2cEEJI+Sj8P4gWvKCpgCi7rKSMVPapfelN8huMZHiplWsl0JyaH xkU6WwAa2ciBIayGuY7vsPY2LGudosN4th+5eXnB0gfIJFCuQjhaK3dI 5iM= ;; Received 1270 bytes from 127.0.1.1#53(127.0.1.1) in 1033 ms AAA.X.41.in-addr.arpa. 13805 IN NS dns001dns03.myorg.com. AAA.X.41.in-addr.arpa. 13805 IN NS dns001dns01.myorg.com. AAA.X.41.in-addr.arpa. 13805 IN NS dns001dns02.myorg.com. ;; Received 215 bytes from 192.112.36.4#53(g.root-servers.net) in 331 ms AAA.X.41.in-addr.arpa. 13805 IN NS dns001dns01.myorg.com. AAA.X.41.in-addr.arpa. 13805 IN NS dns001dns02.myorg.com. AAA.X.41.in-addr.arpa. 13805 IN NS dns001dns03.myorg.com. ;; BAD (HORIZONTAL) REFERRAL ;; Received 215 bytes from 41.X.113.52#53(dns001dns03.myorg.com) in 272 ms