Re: [cobalt-users] RAQ4i DNS - Interesting Reverse Lookup

[flash22@xxxxxxx]

On Fri, 9 Feb 2001, Stephan Whelan wrote:

> Hi,
> 
> I've had a RAQ4i 512 looking after one of my major sites www.deeperblue.net
> for a while now and it has been assigned two IP's of 212.67.200.130 and
> 212.67.200.131.
> 
> Now whilst all domain names are resolving to the right websites I have a
> concern when I do a Trace Route or a Reverse Lookup using any of the two IP
> addresses.
> 
> Instead of showing up as ns.deeperblue.net and ns2.deeperblue.net (which are
> the assigned names for the two IP addresses) it comes up as
> ns.mda-communications.co.uk and ns2.mda-communications.co.uk which are
> supposed to be two very different IP addresses and not related to my
> business at all.
> 
> I have tried this from several different computers on different networks and
> get the same results.

The top level in-addr server for that IP is ns.webfusion.co.uk (via RIPE)

    ANSWERS:
    ->  130.200.67.212.in-addr.arpa
        name = ns.mda-communications.co.uk
        ttl = 14400 (4H)
    AUTHORITY RECORDS:
    ->  200.67.212.in-addr.arpa
        nameserver = ns.webfusion.co.uk

The only valid A record for mda-communications.co.uk that i could find is 
www.mda-communications.co.uk= 195.74.96.156

(MX records reveal it's an alias to freeola.net)

I'd send an email to the contact listed on RIPE (ripe@xxxxxxxxxxxxxxx) and
ask if they accidently mis-delegated the reverse for the IP  address...

What's really weird is neither the top level nor the expected nameservers
claim authority ....

Server:  www.mda-communications.co.uk
Non-authoritative answer:
130.200.67.212.in-addr.arpa
        name = ns.mda-communications.co.uk
Authoritative answers can be found from:
200.67.212.in-addr.arpa
        nameserver = ns.webfusion.co.uk



Someone botched something ;) 

gsh